https://foojay.io/today/minimizing-security-risks-in-java-application-development/