Runtime Application Self-Protection — 2 Technical Arti…

Jan 18, 2024 · Information Security

Meituan Java RASP: Architecture, Challenges, and Performance Optimizations

The article details Meituan's large‑scale RASP (Runtime Application Self‑Protection) rollout, covering deployment challenges such as heterogeneous Java environments, performance impact of agent injection, upgrade difficulties, monitoring complexities, and the engineering solutions—including agentmain/premain hybrid loading, gray‑scale upgrades, hot‑update plugin architecture, and performance optimizations—validated with concrete metrics and benchmarks.

Gray DeploymentHot UpdateInstrumentation

0 likes · 31 min read

Meituan Java RASP: Architecture, Challenges, and Performance Optimizations

Alibaba Cloud Native

Dec 16, 2021 · Information Security

Why RASP Outperforms Traffic‑Based Defenses Against Log4j2 Exploits

The Log4j2 remote code execution flaw is hard to contain because it enables arbitrary code execution and hides its traffic signatures, but Runtime Application Self‑Protection (RASP) can detect malicious behavior at the application level, offering low false‑positives and automatic component discovery without relying on constantly updated rules.

JavaLog4j2RASP

0 likes · 9 min read

Why RASP Outperforms Traffic‑Based Defenses Against Log4j2 Exploits