Scribd
Upload
2 views2 pages

Java-Focused Prompts Library

The document provides a series of prompts for Java Security Specialists to generate code, manage dependencies, conduct code reviews, and create reports related to security practices. It includes specific tasks such as configuring Spring Security, using BCrypt for password management, and creating a remediation roadmap for legacy applications. Additionally, it emphasizes the importance of specifying framework versions for accurate code generation.

Uploaded by

abdelrahman.mohamedx1999
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
2 views2 pages

Java-Focused Prompts Library

The document provides a series of prompts for Java Security Specialists to generate code, manage dependencies, conduct code reviews, and create reports related to security practices. It includes specific tasks such as configuring Spring Security, using BCrypt for password management, and creating a remediation roadmap for legacy applications. Additionally, it emphasizes the importance of specifying framework versions for accurate code generation.

Uploaded by

abdelrahman.mohamedx1999
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

NOTEBOOK LM PROMPTS — JAVA SECURITY SPECIALIST

Use these prompts after uploading Sources 1&2

🎯 CODE GENERATION PROMPTS:


• "Generate a Spring Security SecurityFilterChain configuration that enforces MFA and
disables dangerous actuators (A05, A07)."
• "Write a Java utility class using BCryptPasswordEncoder for hashing and verifying
passwords (A02)."
• "Show me a safe JPA Repository method using @Query to prevent SQL Injection
(A03)."
• "Create a Java HttpClient wrapper that validates URLs against a whitelist to prevent
SSRF (A10)."
• "Write a Logback configuration snippet that masks credit card numbers and
passwords in logs (A09)."

🔍 DEPENDENCY&BUILD PROMPTS:
• "Create a Maven [Link] snippet that integrates OWASP Dependency-Check and
fails the build on critical vulnerabilities (A06)."
• "How do I configure Gradle to scan for vulnerable dependencies using OWASP tools?"
• "List the top 5 Java libraries from the last 3 years that had critical CVEs related to A08
(Integrity)."

🧪 CODE REVIEW&AUDIT PROMPTS:


• "Act as a Java Security Lead. Review this hypothetical Spring Controller code for A01
(Access Control) and A03 (Injection) flaws."
• "Generate a checklist for securing a Spring Boot application before deploying to
production (A05 Misconfiguration)."
• "What are the secure deserialization best practices for Jackson in Java to avoid A08
risks?"

📊 REPORTING&ROADMAP PROMPTS:
• "Create a remediation roadmap for a legacy Java 8 application moving to Java 17,
focusing on OWASP Top 10 risks."
• "Draft a security requirement document for a new Java microservice, mapping each
OWASP Top 10 item to a specific Spring Security feature."
• "Summarize the differences between Spring Security 5 and 6 regarding authentication
filters (A07)."

🎧 AUDIO OVERVIEW PREP:


• "Summarize the top 3 OWASP risks for Java developers in 2024. Focus on
Dependency-Check, Spring Security, and Injection."
• "Create a podcast script: 'How to secure your Spring Boot app in 10 minutes' based
on the uploaded sources."
💡 TIP: When asking for code, specify your framework version (e.g., 'Spring Boot 3.2'
or 'Jakarta EE 10') for accurate results.

You might also like