Secure Developer Java (Inc OWASP) Training Course

Implementing a secure networked application can be challenging, even for developers who have prior experience with cryptographic building blocks such as encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, the course begins by establishing a solid foundation on the core requirements of secure communication: integrity, confidentiality, remote identification, anonymity, and secure acknowledgment. It also addresses common threats that undermine these requirements alongside real-world solutions.

Given that cryptography is a critical aspect of network security, the most important algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement are discussed. Rather than delving into complex mathematical theories, these concepts are presented from a developer's perspective, highlighting typical use-case examples and practical considerations such as public key infrastructures (PKI). Additionally, security protocols used in secure communication are introduced, with an in-depth look at widely-used protocol families like IPSEC and SSL/TLS.

Common cryptographic vulnerabilities are explored, covering both specific algorithms and protocols. Examples include BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding Oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, the practical implications and potential consequences are outlined without requiring deep mathematical expertise.

Finally, since XML technology is central to data exchange in networked applications, its security aspects are thoroughly described. This includes using XML within web services and SOAP messages, along with protection mechanisms like XML Signature and XML Encryption. The discussion also covers weaknesses in these protections and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand the fundamental concepts of security, IT security, and secure coding
• Comprehend the requirements for secure communication
• Learn about network attacks and defenses across various OSI layers
• Gain a practical understanding of cryptography
• Understand essential security protocols
• Recognize recent attacks against cryptosystems
• Receive information on recent related vulnerabilities
• Comprehend the security concepts underlying web services
• Access resources and further reading on secure coding practices

Audience

Developers, Professionals

Developing robust C and C++ code demands strict protection against malicious exploitation, memory corruption, and input validation failures. This course analyzes common vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion issues. Participants will utilize secure coding standards, static analysis tools, and defensive programming strategies to remove vulnerabilities, ensure proper input sanitization, and build software that is resilient against cyber threats.

Even seasoned Java developers do not necessarily master the full range of security services provided by Java, nor are they always aware of the various vulnerabilities that can affect web applications built with Java.

In addition to introducing the security components of the Standard Java Edition, this course addresses security concerns within Java Enterprise Edition (JEE) and web services. The discussion of specific services begins with the fundamentals of cryptography and secure communication. A variety of exercises cover both declarative and programmatic security techniques in JEE, while the course examines transport-layer and end-to-end security for web services. Through several practical exercises, participants gain hands-on experience with the discussed APIs and tools.

The course also reviews and explains common and severe programming flaws in the Java language and platform, as well as web-related vulnerabilities. Beyond typical errors made by Java developers, the covered security vulnerabilities include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and their corresponding attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and possible mitigation techniques.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Understand the security concepts underlying web services
• Learn to utilize various security features within the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions available in Java EE
• Learn about typical coding mistakes and how to prevent them
• Receive information regarding recent vulnerabilities in the Java framework
• Acquire practical knowledge on using security testing tools
• Obtain resources and further reading materials on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language for the JVM (Java Virtual Machine). Its key features include scripting capabilities, Domain-Specific Language authoring, runtime and compile-time meta-programming, and functional programming. Groovy is frequently used as a complement to Java.

During this instructor-led live training, participants will learn how to program in Groovy by stepping through the creation of a sample application.

Audience

• Developers

Format of the course

• A mix of lectures, discussions, exercises, and extensive hands-on practice

This instructor-led live training in the Netherlands (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand the basic programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in the Netherlands (online or onsite) is aimed at intermediate-level Java developers who wish to design, develop, deploy, and maintain microservices-based applications using Java frameworks like Spring Boot and Spring Cloud.

By the end of this training, participants will be able to:

• Understand the principles and benefits of microservices architecture.
• Build and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Secure, monitor, and scale microservices effectively.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in the Netherlands (available online or onsite) is tailored for intermediate to advanced developers seeking to master the development of microservices using Spring Boot, Docker, and Kubernetes.

By the end of this training, participants will be able to:

• Comprehend microservices architecture principles.
• Build production-ready microservices using Spring Boot.
• Understand the critical role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led, live training in the Netherlands (available online or onsite) is aimed at developers who wish to use Quarkus to build, test, and deploy applications, fully-powered with Java, but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in the Netherlands (online or on-site) is designed for intermediate to advanced developers and architects who aim to develop Java native applications and microservices using Quarkus, with a focus on optimized memory usage and startup performance.

Upon completion of this training, participants will be able to:

• Create high-performance, lightweight Java native applications using Quarkus.
• Construct and deploy RESTful services and microservice architectures.
• Leverage GraalVM for native compilation to enhance startup speed and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led live training in the Netherlands (online or onsite) targets software architects and web developers who wish to use RabbitMQ as messaging middleware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Use Java and Spring with RabbitMQ to build applications.
• Design asynchronous message-driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ.

This instructor-led, live training in the Netherlands (online or onsite) is aimed at web developers who wish to build functional front-end and back-end web applications with Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring security and JWT web tokens.

This instructor-led, live training in the Netherlands (online or onsite) is designed for Java developers who aim to use the Spring 5 framework to develop and deploy enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Understand and implement the latest features of Spring 5.
• Access databases with Spring Applications.
• Use the new reactive web framework, WebFlow, to make an application reactive.
• Integrate a Spring application with legacy Java EE applications.
• Test and deploy an enterprise-grade Spring application.

Spring is a robust Java framework that streamlines enterprise application development through powerful dependency injection, modular architecture, and simplified configuration options.

This instructor-led, live training (available online or on-site) is designed for beginner-level Java developers aiming to build modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 with Java 21.

Upon completion of this training, participants will be able to:

• Grasp Spring’s core principles, including IoC, DI, and AOP.
• Configure Spring applications using XML, annotations, and JavaConfig.
• Develop RESTful services leveraging Spring Boot and JPA.
• Implement CRUD operations, manage transactions, and handle data persistence.
• Utilize advanced Spring features such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical introduction followed by extensive practical exercises.
• Hands-on implementation using real-world examples.
• Interactive discussion and guided troubleshooting.

Course Customization Options

• To request a customized training for this course, please contact us to make arrangements.

Spring WebFlux is a reactive programming module within the Spring Framework, specifically engineered for developing non-blocking, event-driven web applications.

This instructor-led live training (available online or onsite) targets beginner to intermediate Java developers who want to create scalable and responsive applications using Spring WebFlux.

Upon completion of this course, participants will be able to:

• Grasp the core principles of reactive programming with Project Reactor.
• Construct and test non-blocking RESTful APIs using Spring WebFlux.
• Integrate WebFlux seamlessly with databases and external services.
• Apply reactive patterns to practical application scenarios.

Course Format

• Interactive lectures and group discussions.
• Numerous exercises and hands-on practice sessions.
• Live-lab implementation exercises.

Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in the Netherlands (online or onsite) targets developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 along with the WebFlux framework.
• Develop reactive applications and services.