Secure Developer Java (Inc OWASP) Training Course

Developing a secure networked application presents significant challenges, even for experienced developers who have previously utilized various cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, this course first establishes a solid foundation on the core requirements of secure communication—namely secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also addresses common threats that can compromise these requirements, alongside practical, real-world solutions.

Given that cryptography is a critical component of network security, the course explores essential algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematical theories, these topics are examined from a developer's perspective, featuring typical use-case examples and practical considerations such as the implementation of public key infrastructures. The course also introduces security protocols across various domains of secure communication, with a detailed examination of widely adopted protocol families including IPSEC and SSL/TLS.

Common cryptographic vulnerabilities are analyzed, covering issues related to specific algorithms and protocols such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and similar threats, as well as RSA timing attacks. For each vulnerability, the practical implications and potential consequences are clearly described, maintaining a focus on applicability without delving into deep mathematical intricacies.

Finally, recognizing that XML technology is central to data exchange for networked applications, the course covers the security aspects of XML. This includes the use of XML in web services and SOAP messages, alongside protective measures like XML Signature and XML Encryption. The discussion also highlights weaknesses in these protection mechanisms and XML-specific security issues, such as XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Understand the requirements for secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain a practical understanding of cryptography
• Comprehend essential security protocols
• Awareness of recent attacks against cryptosystems
• Receive information on recent related vulnerabilities
• Understand security concepts within Web services
• Access resources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ applications demands a robust approach to counter malicious exploitation, memory corruption, and vulnerabilities related to input validation bypasses. This course explores common vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will learn to apply secure coding standards, utilize static analysis tools, and adopt defensive programming practices to mitigate weaknesses, enforce strict input sanitization, and build software that is resilient against cyber threats.

Even seasoned Java developers often fail to fully master the extensive security services provided by Java, nor are they always conscious of the distinct vulnerabilities that impact Java-based web applications.

Beyond introducing the security components of Standard Java Edition, this course addresses security challenges within Java Enterprise Edition (JEE) and web services. Discussions of specific services are grounded in the fundamental principles of cryptography and secure communication. Participants will engage in various exercises covering declarative and programmatic security techniques in JEE, while exploring both transport-layer and end-to-end security for web services. All components are demonstrated through practical exercises, allowing participants to personally test the discussed APIs and tools.

The course also examines and explains the most common and critical programming flaws associated with the Java language, platform, and web-related vulnerabilities. In addition to typical errors made by Java programmers, the covered security vulnerabilities include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and relevant attack vectors are illustrated through accessible exercises, followed by recommended coding guidelines and potential mitigation techniques.

Participants attending this course will

• Comprehend core concepts of security, IT security, and secure coding
• Gain knowledge of web vulnerabilities beyond the OWASP Top Ten and learn how to prevent them
• Understand the security concepts underlying web services
• Learn to utilize various security features within the Java development environment
• Develop a practical understanding of cryptography
• Comprehend security solutions offered by Java EE
• Identify typical coding mistakes and learn how to avoid them
• Receive information regarding recent vulnerabilities in the Java framework
• Acquire practical skills in using security testing tools
• Access resources and further readings on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language for the JVM (Java Virtual Machine). It offers features such as scripting capabilities, Domain-Specific Language authoring, runtime and compile-time meta-programming, and functional programming. Groovy is frequently used as a complement to Java.

During this instructor-led live training, participants will learn how to program in Groovy by walking through the creation of a sample application.

Audience

• Developers

Format of the course

• A blend of lectures, discussions, exercises, and extensive hands-on practice

This instructor-led, live training in Sweden (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand the basic programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Sweden (online or onsite) is tailored for intermediate-level Java developers who aim to design, develop, deploy, and maintain microservices-based applications using Java frameworks such as Spring Boot and Spring Cloud.

Upon completion of this training, participants will be able to:

• Grasp the core principles and advantages of microservices architecture.
• Construct and deploy microservices utilizing Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Effectively secure, monitor, and scale microservices.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in Sweden (available online or onsite) is specifically tailored for intermediate to advanced developers who wish to master the development of microservices using Spring Boot, Docker, and Kubernetes.

Upon completion of this training, participants will be able to:

• Grasp the core principles of microservices architecture.
• Develop production-ready microservices using Spring Boot.
• Understand the essential role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led, live training in Sweden (online or onsite) is aimed at developers who wish to use Quarkus to build, test, and deploy applications, fully-powered with Java, but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in Sweden (online or onsite) is designed for intermediate to advanced developers and architects looking to build Java native applications and microservices with Quarkus, emphasizing optimized memory usage and startup performance.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led live training in Sweden (online or on-site) is designed for software architects and web developers who wish to use RabbitMQ as middleware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Build applications using Java, Spring, and RabbitMQ.
• Design asynchronous, message-driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ.

This instructor-led, live training in Sweden (online or onsite) is designed for web developers who want to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application using React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services using Spring Security and JWT web tokens.

This instructor-led, live training in Sweden (online or on-site) is designed for Java developers who want to use the Spring 5 framework to build and deploy enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Understand and implement the latest features of Spring 5.
• Connect to databases using Spring applications.
• Utilize the new reactive web framework, WebFlow, to create reactive applications.
• Integrate Spring applications with legacy Java EE applications.
• Test and deploy enterprise-grade Spring applications.

Spring is a robust Java framework designed to simplify enterprise application development through powerful dependency injection, modular architecture, and streamlined configuration options.

This instructor-led live training (available online or onsite) targets beginner-level Java developers aiming to build modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 with Java 21.

Upon completion of this training, participants will be able to:

• Grasp Spring’s core principles, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configure Spring applications using XML, annotations, and JavaConfig.
• Develop RESTful services leveraging Spring Boot and JPA.
• Implement CRUD operations, manage transactions, and handle data persistence.
• Utilize advanced Spring features such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical overview followed by extensive practical exercises.
• Hands-on implementation using real-world examples.
• Interactive discussions and guided troubleshooting.

Customization Options

• For a customized training session, please contact us to arrange your specific requirements.

Spring WebFlux is a reactive programming module within the Spring Framework designed for building non-blocking, event-driven web applications.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level Java developers who wish to build scalable and responsive applications using Spring WebFlux.

By the end of this training, participants will be able to:

• Grasp the core principles of reactive programming using Project Reactor.
• Develop and test non-blocking RESTful APIs with Spring WebFlux.
• Seamlessly integrate WebFlux with databases and external services.
• Apply reactive patterns to real-world application scenarios.

Format of the Course

• Interactive lecture and discussion.
• Plenty of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Sweden (online or onsite) targets developers aiming to leverage WebFlux for creating and deploying reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 along with the WebFlux framework.
• Develop reactive applications and services.