Secure Developer Java (Inc OWASP) Training Course

Building a secure networked application can be challenging, even for developers who have previously utilized various cryptographic components like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, the course first establishes a strong foundation on the core requirements of secure communication—including secure acknowledgment, integrity, confidentiality, remote authentication, and anonymity. It also outlines common threats that can compromise these requirements alongside real-world mitigation strategies.

Given that cryptography is a critical component of network security, the course examines essential cryptographic algorithms, including symmetric cryptography, hashing, asymmetric cryptography, and key agreement protocols. Rather than focusing on complex mathematical theories, the material is presented from a developer's perspective, featuring typical use-case examples and practical considerations such as public key infrastructure (PKI). Additionally, security protocols across various domains of secure communication are introduced, with a detailed examination of widely adopted protocol families like IPSEC and SSL/TLS.

The course addresses common cryptographic vulnerabilities associated with specific algorithms and protocols, such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, practical implications and potential consequences are explained without delving into deep mathematical details.

Finally, since XML technology is central to data exchange in networked applications, the course covers XML security aspects. This includes the use of XML in web services and SOAP messages, protection mechanisms like XML Signature and XML Encryption, and potential weaknesses in these measures. XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection are also discussed.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Comprehend the requirements for secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain practical knowledge of cryptography
• Understand essential security protocols
• Recognize recent attacks targeting cryptosystems
• Gain insights into recent related vulnerabilities
• Understand security concepts within web services
• Access resources and further reading materials on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ applications demands a rigorous defense against malicious exploitation, memory corruption, and input validation bypasses. This course explores vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will apply secure coding guidelines, utilize static analysis tools, and implement defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software that is resilient against cyberattacks.

Even seasoned Java developers do not necessarily master every security service provided by Java, nor are they always fully aware of the various vulnerabilities pertinent to Java-based web applications.

In addition to introducing the security components of the Standard Java Edition, this course addresses security issues within Java Enterprise Edition (JEE) and web services. Before diving into specific services, the course covers the foundations of cryptography and secure communication. Through various exercises, participants will explore declarative and programmatic security techniques in JEE, as well as both transport-layer and end-to-end security for web services. Practical exercises allow participants to experiment with the discussed APIs and tools firsthand.

The course also examines and explains the most common and severe programming flaws and web-related vulnerabilities associated with the Java language and platform. Beyond typical bugs made by Java programmers, the security vulnerabilities covered include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and corresponding attacks are demonstrated through accessible exercises, followed by recommended coding guidelines and mitigation strategies.

Participants attending this course will

• Understand the fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to avoid them
• Understand the security concepts of web services
• Learn to utilize various security features of the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions of Java EE
• Learn about typical coding mistakes and how to avoid them
• Receive information on some recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Obtain resources and further readings on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language for the JVM (Java Virtual Machine). Its key features encompass scripting, Domain-Specific Language (DSL) creation, runtime and compile-time meta-programming, and functional programming. Groovy is frequently utilized alongside Java.

In this instructor-led live training, participants will learn to program in Groovy by building a sample application step by step.

Audience

• Developers

Course Format

• A blend of lectures, discussions, exercises, and extensive hands-on practice

This instructor-led, live training in South Korea (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand the basic programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in South Korea (online or onsite) is designed for intermediate Java developers aiming to design, develop, deploy, and maintain microservices-based applications using Java frameworks such as Spring Boot and Spring Cloud.

Upon completion of this training, participants will be able to:

• Comprehend the fundamental principles and advantages of microservices architecture.
• Build and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Effectively secure, monitor, and scale microservices.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in South Korea (available online or onsite) is specifically designed for intermediate to advanced developers aiming to master the creation of microservices using Spring Boot, Docker, and Kubernetes.

Upon completing this training, participants will be capable of:

• Grasping the core principles of microservices architecture.
• Constructing production-grade microservices using Spring Boot.
• Recognizing the essential role of Docker in containerizing microservices.
• Configuring Kubernetes clusters for the deployment and orchestration of microservices.

This instructor-led, live training in South Korea (online or on-site) is aimed at developers who wish to use Quarkus to build, test, and deploy applications, fully-powered with Java, but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in South Korea (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led, live training in South Korea (online or on-site) is designed for software architects and web developers who wish to utilize RabbitMQ as messaging middleware and program in Java using Spring to build applications.

Upon completion of this training, participants will be capable of:

• Building applications using Java, Spring, and RabbitMQ.
• Designing asynchronous message-driven systems with RabbitMQ.
• Creating and implementing queues, topics, exchanges, and bindings within RabbitMQ.

This instructor-led live training in South Korea (available online or onsite) is aimed at web developers who wish to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring Security and JWT web tokens.

This instructor-led, live training in South Korea (available online or onsite) targets Java developers who want to utilize the Spring 5 framework to develop and deploy enterprise web applications.

Upon completing this training, participants will be capable of:

• Installing and configuring Spring 5.
• Comprehending and implementing the newest features of Spring 5.
• Connecting to databases via Spring applications.
• Leveraging the modern reactive web framework, WebFlow, to create reactive applications.
• Integrating Spring applications with existing legacy Java EE systems.
• Testing and deploying enterprise-grade Spring applications.

Spring is a robust Java framework designed to streamline enterprise application development by offering powerful dependency injection, a modular architecture, and simplified configuration mechanisms.

This instructor-led live training, available online or on-site, is tailored for beginner-level Java developers aiming to create modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 with Java 21.

Upon completing this training, participants will be able to:

• Grasp Spring’s core principles, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configure Spring applications using XML, annotations, and JavaConfig.
• Develop RESTful services utilizing Spring Boot and JPA.
• Implement CRUD operations, manage transactions, and handle data persistence.
• Leverage advanced Spring features such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical introduction followed by extensive hands-on exercises.
• Practical implementation through real-world examples.
• Interactive discussions and guided troubleshooting sessions.

Course Customization Options

• For personalized training requests, please contact us to arrange a session.

Spring WebFlux is a reactive programming module within the Spring Framework, designed to facilitate the development of non-blocking, event-driven web applications.

This instructor-led live training, available both online and onsite, targets beginner to intermediate Java developers aiming to create scalable and responsive applications using Spring WebFlux.

Upon completing this training, participants will be able to:

• Comprehend the core concepts of reactive programming with Project Reactor.
• Develop and test non-blocking RESTful APIs using Spring WebFlux.
• Integrate WebFlux with databases and external services.
• Apply reactive patterns to practical application scenarios.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and hands-on practice.
• Practical implementation in a live-lab environment.

Customization Options

• For customized training options, please contact us to arrange your specific requirements.

This instructor-led, live training in South Korea (online or onsite) is aimed at developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive application and services.