Secure Developer Java (Inc OWASP) Training Course

Developing a secure networked application can be challenging, even for developers who have previously utilized various cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, we first establish a solid foundation regarding the core requirements of secure communication: secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. We also highlight typical threats that can undermine these requirements, alongside real-world solutions.

Given that cryptography is a critical component of network security, we discuss the most important algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on deep mathematical backgrounds, we approach these topics from a developer's perspective, providing typical use-case examples and practical considerations, such as public key infrastructures. We introduce security protocols across various areas of secure communication, offering an in-depth look at widely-used protocol families like IPSEC and SSL/TLS.

We also address common cryptographic vulnerabilities associated with specific algorithms and protocols, such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, we describe practical considerations and potential consequences without delving into complex mathematical details.

Finally, since XML technology is central to data exchange for networked applications, we cover XML security aspects. This includes using XML within web services and SOAP messages, along with protection measures like XML Signature and XML Encryption. We also examine weaknesses in these protections and XML-specific security issues, such as XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand the basic concepts of security, IT security, and secure coding
• Grasp the requirements of secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain a practical understanding of cryptography
• Comprehend essential security protocols
• Understand recent attacks against cryptosystems
• Gain insights into recent related vulnerabilities
• Understand security concepts for Web services
• Access sources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ code demands a robust defense strategy against malicious exploitation, memory corruption, and input validation bypasses. This course explores common vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will learn to apply secure coding guidelines, utilize static analysis tools, and adopt defensive programming techniques to eliminate weaknesses, enforce input sanitization, and produce hardened software that is resilient against cyberattacks.

Even seasoned Java developers do not always master every security service provided by Java, nor are they always aware of the various vulnerabilities relevant to Java-based web applications.

This course, in addition to introducing the security components of Standard Java Edition, addresses security issues within Java Enterprise Edition (JEE) and web services. The discussion of specific services begins with the foundations of cryptography and secure communication. Various exercises focus on declarative and programmatic security techniques in JEE, while both transport-layer and end-to-end security for web services are examined. The application of all components is demonstrated through several practical exercises, allowing participants to experiment with the discussed APIs and tools firsthand.

The course also reviews and explains the most common and severe programming flaws in the Java language and platform, as well as web-related vulnerabilities. Beyond typical errors made by Java programmers, the introduced security vulnerabilities cover both language-specific issues and problems arising from the runtime environment. All vulnerabilities and associated attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and potential mitigation techniques.

Participants attending this course will

• Understand the basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Understand the security concepts of web services
• Learn to use various security features of the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions of Java EE
• Learn about typical coding mistakes and how to avoid them
• Gain information about some recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Obtain sources and further readings on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language for the JVM (Java Virtual Machine). Its key features include scripting capabilities, Domain-Specific Language (DSL) authoring, runtime and compile-time meta-programming, and functional programming. Groovy is frequently used to complement Java.

Through this instructor-led live training, participants will learn how to program in Groovy by walking through the creation of a sample application.

Audience

• Developers

Format of the course

• Part lecture, part discussion, exercises, and heavy hands-on practice

This instructor-led, live training in Taiwan (online or onsite) is designed for beginner-level developers who want to learn the fundamentals of Groovy Programming.

By the end of this training, participants will be able to:

• Grasp fundamental programming concepts.
• Write simple Groovy scripts and leverage core Groovy features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Taiwan (online or onsite) is designed for intermediate-level Java developers who aspire to design, develop, deploy, and maintain microservices-based applications utilizing Java frameworks such as Spring Boot and Spring Cloud.

Upon completion of this training, participants will be capable of:

• Grasping the principles and advantages of microservices architecture.
• Constructing and deploying microservices using Java and Spring Boot.
• Implementing service discovery, configuration management, and API gateways.
• Effectively securing, monitoring, and scaling microservices.
• Deploying microservices utilizing Docker and Kubernetes.

This instructor-led, live training in Taiwan (available online or onsite) is tailored for intermediate to advanced developers seeking to master the development of microservices using Spring Boot, Docker, and Kubernetes.

By the end of this training, participants will be able to:

• Comprehend microservices architecture principles.
• Build production-ready microservices using Spring Boot.
• Understand the critical role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led, live training in Taiwan (online or onsite) is designed for developers who wish to utilize Quarkus to build, test, and deploy applications that are fully powered by Java but require less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in Taiwan (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led live training in Taiwan (online or onsite) is aimed at software architects and web developers who wish to use RabbitMQ as a messaging middle-ware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Use Java and Spring with RabbitMQ to build applications.
• Design asynchronous message driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ

This instructor-led live training in Taiwan (online or onsite) is designed for web developers who wish to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build front-end applications with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring security and JWT web tokens.

This instructor-led, live training in Taiwan (online or onsite) is aimed at Java developers who wish to use the Spring 5 framework to develop and deploy build enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Understand and implement Spring 5's latest features.
• Access databases with Spring Application.
• Use the new reactive web framework, WebFlow, to make an application reactive.
• Integrate a Spring application with legacy Java EE applications.
• Test and deploy an enteprise-grade Spring application.

Spring is a robust Java framework designed to streamline enterprise application development through powerful dependency injection, a modular architecture, and efficient configuration options.

This instructor-led live training (available online or on-site) targets beginner-level Java developers eager to create modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 alongside Java 21.

Upon completion of this training, participants will be capable of:

• Grasping Spring’s foundational principles, including IoC, DI, and AOP.
• Configuring Spring applications via XML, annotations, and JavaConfig.
• Developing RESTful services leveraging Spring Boot and JPA.
• Implementing CRUD operations, managing transactions, and handling data persistence.
• Utilizing advanced Spring features such as profiles, exception handling, and data serialization.

Course Format

• Concise theoretical overview followed by comprehensive practical exercises.
• Practical implementation using real-world scenarios.
• Interactive discussions and guided troubleshooting.

Customization Options

• For customized training requests, please contact us to arrange.

Spring WebFlux is a reactive programming module within the Spring Framework designed for building non-blocking, event-driven web applications.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level Java developers who wish to build scalable and responsive applications using Spring WebFlux.

By the end of this training, participants will be able to:

• Understand the fundamentals of reactive programming with Project Reactor.
• Build and test non-blocking RESTful APIs using Spring WebFlux.
• Integrate WebFlux with databases and external services.
• Apply reactive patterns to real-world application scenarios.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training session in Taiwan (available online or onsite) is aimed at developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive applications and services.