Secure Developer Java (Inc OWASP) Training Course

Building a secure networked application presents challenges even for developers experienced with cryptographic primitives like encryption and digital signatures. To help participants grasp the role and application of these tools, the course establishes a solid foundation on the core requirements of secure communication: secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also highlights common threats to these requirements and presents real-world solutions.

Since cryptography is fundamental to network security, the course examines key algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on deep mathematical theory, the content takes a developer-centric approach, illustrating typical use cases and practical considerations such as public key infrastructures (PKI). The course introduces security protocols across various domains, with a detailed exploration of widely used families like IPSEC and SSL/TLS.

Common cryptographic vulnerabilities are analyzed in relation to specific algorithms and protocols. This includes well-known issues such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each, the course outlines practical implications and potential consequences without diving into complex mathematical details.

Given that XML technology is central to data exchange for networked applications, the course also covers XML security. This includes the use of XML in web services and SOAP messages, along with protective measures like XML Signature and XML Encryption. Additionally, it addresses weaknesses in these measures and XML-specific threats such as XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Understand the requirements for secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain a practical understanding of cryptography
• Comprehend essential security protocols
• Understand recent attacks targeting cryptosystems
• Receive information on recent related vulnerabilities
• Understand the security concepts underlying web services
• Access resources and further reading on secure coding practices

Audience

Developers, Professionals

Developing secure code in C and C++ demands a robust defense strategy against malicious exploitation, memory corruption, and input validation bypasses. This course explores common vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will learn to apply secure coding standards, utilize static analysis tools, and adopt defensive programming techniques to eliminate weaknesses, enforce strict input sanitization, and deliver software that is hardened against cyber threats.

Even seasoned Java developers do not automatically master all the security services provided by Java, nor are they fully aware of the various vulnerabilities that impact Java-based web applications.

This course introduces the security components of Java Standard Edition (Java SE) and addresses security challenges within Java Enterprise Edition (Java EE) and web services. Before exploring specific services, the course covers the fundamentals of cryptography and secure communication. Through practical exercises, participants learn about declarative and programmatic security techniques in Java EE, as well as transport-layer and end-to-end security for web services. All concepts are reinforced through hands-on exercises where participants can experiment with the discussed APIs and tools.

The course also examines and explains the most common and severe programming flaws in the Java language and platform, along with web-related vulnerabilities. Beyond typical errors made by Java developers, the discussed security vulnerabilities encompass both language-specific issues and problems arising from the runtime environment. Each vulnerability and corresponding attack is demonstrated through easy-to-follow exercises, followed by recommended coding guidelines and mitigation strategies.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to prevent them
• Comprehend the security concepts underlying web services
• Gain proficiency in using various security features of the Java development environment
• Develop a practical understanding of cryptography
• Understand the security solutions available in Java EE
• Identify typical coding mistakes and learn how to avoid them
• Receive information on recent vulnerabilities affecting the Java framework
• Acquire practical knowledge of security testing tools
• Access resources and further readings on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language for the JVM (Java Virtual Machine). Among its key features are scripting capabilities, Domain-Specific Language authoring, runtime and compile-time meta-programming, and functional programming. It is commonly used as a complement to Java.

In this instructor-led live training, participants will learn Groovy programming by building a sample application step by step.

Audience

• Developers

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice

This instructor-led live training in Czech Republic (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand the basic programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Czech Republic (online or onsite) is designed for intermediate-level Java developers aiming to design, develop, deploy, and maintain microservices-based applications utilizing Java frameworks such as Spring Boot and Spring Cloud.

Upon completion of this training, participants will be capable of:

• Grasping the core principles and advantages of microservices architecture.
• Constructing and deploying microservices using Java and Spring Boot.
• Implementing service discovery, configuration management, and API gateways.
• Effectively securing, monitoring, and scaling microservices.
• Deploying microservices using Docker and Kubernetes.

This instructor-led, live training in Czech Republic (available online or onsite) is designed for intermediate to advanced developers who want to master microservice development using Spring Boot, Docker, and Kubernetes.

By the end of this training, participants will be able to:

• Grasp the core principles of microservices architecture.
• Develop production-ready microservices using Spring Boot.
• Understand the essential role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led, live training in Czech Republic (online or onsite) is aimed at developers who wish to use Quarkus to build, test, and deploy applications, fully-powered with Java, but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in Czech Republic (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led, live training in Czech Republic (online or onsite) targets software architects and web developers who wish to use RabbitMQ as messaging middleware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Use Java and Spring with RabbitMQ to build applications.
• Design asynchronous message-driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ.

This instructor-led live training in Czech Republic (online or onsite) is designed for web developers who wish to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring Security and JWT web tokens.

This instructor-led, live training in Czech Republic (online or onsite) is designed for Java developers who wish to use the Spring 5 framework to develop and deploy enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Understand and implement Spring 5's latest features.
• Access databases with Spring Application.
• Use the new reactive web framework, WebFlow, to make an application reactive.
• Integrate a Spring application with legacy Java EE applications.
• Test and deploy an enterprise-grade Spring application.

Spring serves as a robust Java framework designed to streamline enterprise application development through features like powerful dependency injection, a modular architecture, and simplified configuration options.

This instructor-led live training, available either online or onsite, targets beginner Java developers eager to construct modern, production-ready web applications utilizing the latest Spring Framework and Spring Boot 3.5.5 alongside Java 21.

Upon completing this training, participants will be equipped to:

• Grasp Spring’s core principles, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configure Spring applications through XML, annotations, and JavaConfig.
• Construct RESTful services leveraging Spring Boot and JPA.
• Execute CRUD operations, manage transactions, and oversee data persistence.
• Utilize advanced Spring capabilities such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical overview followed by extensive practical exercises.
• Practical implementation using real-world examples.
• Interactive discussions and guided troubleshooting sessions.

Customization Options

• To arrange a customized training version of this course, please contact us.

Spring WebFlux is a reactive programming module within the Spring Framework, specifically designed for constructing non-blocking, event-driven web applications.

This instructor-led live training, available either online or onsite, is targeted at beginner to intermediate Java developers who aim to create scalable and highly responsive applications using Spring WebFlux.

Upon completing this training, participants will be equipped to:

• Grasp the core concepts of reactive programming through Project Reactor.
• Develop and test non-blocking RESTful APIs leveraging Spring WebFlux.
• Seamlessly integrate WebFlux with databases and external services.
• Apply reactive design patterns to practical, real-world application scenarios.

Course Format

• Engaging lectures and group discussions.
• Extensive exercises and practical practice sessions.
• Hands-on implementation within a live-lab environment.

Course Customization Options

• To arrange a tailored training session for this course, please get in touch with us.

This instructor-led, live training in Czech Republic (online or onsite) is aimed at developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive applications and services.