fr
nlen
IT Training

Java Security

This training provides the skills necessary to develop secure web applications in Java. It teaches developers common security vulnerabilities (OWASP Top Ten) in Java web applications and the best practices to write secure code. The training covers the security testing practices to put into place in order to detect flaws, fix them and strengthen the security of the application as whole.

Qui devrait suivre ce cours?

Java Developers, Java Application Architects, Java EE Application Server administrators, IT Security managers

Prérequis

Participants should be comfortable with Java language, syntax and object-oriented application development. They should be familiar with Java 8+.

They should be familiar with Java Web development.

This training provides the skills necessary to develop secure web applications in Java. It teaches developers common security vulnerabilities (OWASP Top Ten) in Java web applications and the best practices to write secure code. The training covers the security testing practices to put into place in order to detect flaws, fix them and strengthen the security of the application as whole.

Concerns for Web Applications

  •  Threats and Attack Vectors
  •  Secure Design Principles
  •  Container Authentication and Authorization
  •  HTML Forms
  •  Privacy Under /WEB-INF
  •  HTTP and HTTPS
  • Top ten OWASP Vulnerabilities

Authentication and Authorization using JAAS

  • Declaring Security Constraints
  • User Accounts and Roles
  • Protecting Credentials in Transit
  • Authorization Over URL Patterns
  • FORM Authentication
  • Session Fixation
  • Programmatic Security

Protecting against Common Web Attacks

  • Injection Attacks
  • Cross-Site Scripting
  • Cross-Site Request Forgery
  • Predictable Resource Locations
  • Protections in JDBC and JPA
  • Session Management
  • Taking Care of Cookies

Implementing OAuth2 and OpenID Connect

  • Understanding Delegation and its benefits
  • Introducing claims based security
  • Understanding tokens and their representation on the net
  • Introducing OAuth 2
  • OAuth 2 flows
  • OpenID Connect: Adding sign-in to OAuth2

Auditing Security

  • Static code analysis
  • Passive vs. active scanning
  • Automated scans with OAWSP Zap
  • Auditing authentication, session and access control
  • Fuzzing
  • Discovering logic flaws
  • Reporting

Informations practiques

Durée

publish

Langues

EN

Prix

€ 1450 + 21% VAT

Emplacement

Classroom Course

Plannings

Guaranteed to run

Sessions anglophones
07 - 09/2/2024Réserver
13 - 15/5/2024Réserver
16 - 18/10/2024Réserver
11 - 13/12/2024Réserver

Partagez ce cours sur

Réservez votre formation

Entrez vos informations pour confirmer votre réservation.

    Vous pourriez aussi être intéressé par

    Java, SpringJava, Spring
    Java Design Patterns
    18 - 20/3/2024, 10 - 12/6/20 ...
    This training provides a deep understanding of the most common object oriented design patterns. It covers the most useful patterns…
    Java, SpringJava, Spring
    Programming in Java
    22 - 26/1/2024, 22 - 26/4/20 ...
    This training is a comprehensive study of core Java. It teaches the object-oriented programming concepts, the Java Platform Module System…
    Java, SpringJava, Spring
    What’s new in Java 9 to 17
    04 - 06/3/2024, 05 - 07/6/20 ...
    In this training, you will learn the important Java new features introduced in Java 9 to Java 17. The course…

    Test de pré-requis

    Passer le test

    Vous cherchez une solution sur mesure ?

    Lancez-vous dans l’entraînement personnel