en
nlfr
IT Training

Java Security

This training provides the skills necessary to develop secure web applications in Java. It teaches developers common security vulnerabilities (OWASP Top Ten) in Java web applications and the best practices to write secure code. The training covers the security testing practices to put into place in order to detect flaws, fix them and strengthen the security of the application as whole.

Who should attend this course?

Java Developers, Java Application Architects, Java EE Application Server administrators, IT Security managers

Prerequisites

Participants should be comfortable with Java language, syntax and object-oriented application development. They should be familiar with Java 8+.

They should be familiar with Java Web development.

This training provides the skills necessary to develop secure web applications in Java. It teaches developers common security vulnerabilities (OWASP Top Ten) in Java web applications and the best practices to write secure code. The training covers the security testing practices to put into place in order to detect flaws, fix them and strengthen the security of the application as whole.

Concerns for Web Applications

  •  Threats and Attack Vectors
  •  Secure Design Principles
  •  Container Authentication and Authorization
  •  HTML Forms
  •  Privacy Under /WEB-INF
  •  HTTP and HTTPS
  • Top ten OWASP Vulnerabilities

Authentication and Authorization using JAAS

  • Declaring Security Constraints
  • User Accounts and Roles
  • Protecting Credentials in Transit
  • Authorization Over URL Patterns
  • FORM Authentication
  • Session Fixation
  • Programmatic Security

Protecting against Common Web Attacks

  • Injection Attacks
  • Cross-Site Scripting
  • Cross-Site Request Forgery
  • Predictable Resource Locations
  • Protections in JDBC and JPA
  • Session Management
  • Taking Care of Cookies

Implementing OAuth2 and OpenID Connect

  • Understanding Delegation and its benefits
  • Introducing claims based security
  • Understanding tokens and their representation on the net
  • Introducing OAuth 2
  • OAuth 2 flows
  • OpenID Connect: Adding sign-in to OAuth2

Auditing Security

  • Static code analysis
  • Passive vs. active scanning
  • Automated scans with OAWSP Zap
  • Auditing authentication, session and access control
  • Fuzzing
  • Discovering logic flaws
  • Reporting

Practical information

Duration

publish

Languages

EN

Price

€ 1450 + 21% VAT

Location

Classroom Course

Schedule

Guaranteed to run

Sessions in English
07 - 09/2/2024Book
13 - 15/5/2024Book
16 - 18/10/2024Book
11 - 13/12/2024Book

Share this course on

Book your training

Enter your information to confirm your booking.

    You might also be interested in

    Java, SpringJava, Spring
    Java Design Patterns
    18 - 20/3/2024, 10 - 12/6/20 ...
    This training provides a deep understanding of the most common object oriented design patterns. It covers the most useful patterns…
    Java, SpringJava, Spring
    Programming in Java
    22 - 26/1/2024, 22 - 26/4/20 ...
    This training is a comprehensive study of core Java. It teaches the object-oriented programming concepts, the Java Platform Module System…
    Java, SpringJava, Spring
    What’s new in Java 9 to 17
    04 - 06/3/2024, 05 - 07/6/20 ...
    In this training, you will learn the important Java new features introduced in Java 9 to Java 17. The course…

    Prerequisite test

    Take the test

    Looking for a tailor made solution?

    Get started with personal training