Secure Developer Java (Inc OWASP) Training Course

Developing a secure networked application can be challenging, even for developers who have previously utilized various cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, this course first establishes a solid foundation regarding the main requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also addresses common issues that can compromise these requirements alongside real-world solutions.

Since cryptography is a critical aspect of network security, the course discusses the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on deep mathematical backgrounds, these topics are explored from a developer's perspective, showcasing typical use-case examples and practical considerations related to crypto usage, such as public key infrastructures. Security protocols across various areas of secure communication are introduced, with an in-depth discussion on the most widely used protocol families like IPSEC and SSL/TLS.

The course also covers typical cryptographic vulnerabilities related to specific algorithms and protocols, including BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and others, as well as RSA timing attacks. For each issue, practical considerations and potential consequences are described without delving into complex mathematical details.

Finally, given that XML technology is central to data exchange for networked applications, the security aspects of XML are examined. This includes the use of XML within web services and SOAP messages, along with protective measures such as XML signature and XML encryption. The course also addresses weaknesses in these protections and XML-specific security issues like XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Comprehend the requirements for secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain a practical understanding of cryptography
• Understand essential security protocols
• Grasp recent attacks against cryptosystems
• Receive information on recent related vulnerabilities
• Understand the security concepts of Web services
• Access sources and further readings on secure coding practices

Audience

Developers, Professionals

Crafting secure C and C++ code demands rigorous defenses against malicious exploitation, memory corruption, and bypasses of input validation. This course explores vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will implement secure coding guidelines, utilize static analysis tools, and apply defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software that is resilient against cyberattacks.

Even seasoned Java developers do not necessarily master all the security services provided by Java, nor are they always aware of the various vulnerabilities relevant to web applications built with Java.

In addition to introducing the security components of the Standard Java Edition, this course addresses security issues within the Java Enterprise Edition (JEE) and web services. The discussion of specific services begins with the fundamentals of cryptography and secure communication. Various exercises cover declarative and programmatic security techniques in JEE, as well as both transport-layer and end-to-end security for web services. The use of all components is illustrated through several practical exercises, allowing participants to explore the discussed APIs and tools themselves.

The course also reviews and explains the most frequent and severe programming flaws of the Java language and platform, as well as web-related vulnerabilities. Beyond the typical bugs made by Java programmers, the security vulnerabilities covered include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and relevant attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and possible mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Understand the security concepts of web services
• Learn to use various security features of the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions of Java EE
• Learn about typical coding mistakes and how to avoid them
• Get information about some recent vulnerabilities in the Java framework
• Gain practical knowledge in using security testing tools
• Get sources and further readings on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language built on the JVM (Java Virtual Machine). Key features include scripting capabilities, Domain-Specific Language authoring, runtime and compile-time meta-programming, and functional programming. Groovy is frequently used as a complement to Java.

During this instructor-led live training, participants will learn how to program in Groovy by stepping through the creation of a sample application.

Audience

• Developers

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice

This instructor-led live training in Serbia (online or onsite) targets beginner-level developers eager to learn the basics of Groovy Programming.

By the conclusion of this training, participants will be able to:

• Understand fundamental programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Serbia (online or onsite) is aimed at intermediate-level Java developers who wish to design, develop, deploy, and maintain microservices-based applications using Java frameworks like Spring Boot and Spring Cloud.

By the end of this training, participants will be able to:

• Understand the principles and benefits of microservices architecture.
• Build and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Secure, monitor, and scale microservices effectively.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in Serbia (available online or onsite) is tailored for intermediate to advanced developers seeking to master the development of microservices using Spring Boot, Docker, and Kubernetes.

By the end of this training, participants will be able to:

• Grasp the core principles of microservices architecture.
• Construct production-ready microservices using Spring Boot.
• Recognize the essential role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led, live training in Serbia (online or onsite) is aimed at developers who wish to use Quarkus to build, test, and deploy applications, fully-powered with Java, but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in Serbia (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led live training in Serbia (online or onsite) is aimed at software architects and web developers who wish to use RabbitMQ as messaging middleware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Use Java and Spring with RabbitMQ to build applications.
• Design asynchronous message-driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ

This instructor-led live training in Serbia (online or onsite) is aimed at web developers who wish to build functional front-end and back-end web applications with Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring Security and JWT web tokens.

This instructor-led, live training in Serbia (online or onsite) is tailored for Java developers who wish to utilize the Spring 5 framework to develop and deploy enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Understand and implement the latest features of Spring 5.
• Access databases with Spring Applications.
• Use the new reactive web framework, WebFlow, to make an application reactive.
• Integrate a Spring application with legacy Java EE applications.
• Test and deploy an enterprise-grade Spring application.

Spring is a robust Java framework that streamlines enterprise application development through powerful dependency injection, a modular architecture, and simplified configuration mechanisms.

This instructor-led live training (available online or onsite) is designed for beginner-level Java developers aiming to construct modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 paired with Java 21.

Upon completion of this training, participants will be able to:

• Grasp Spring’s core principles, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configure Spring applications utilizing XML, annotations, and JavaConfig.
• Develop RESTful services leveraging Spring Boot and JPA.
• Execute CRUD operations, manage transactions, and handle data persistence.
• Utilize advanced Spring capabilities such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical overview followed by extensive practical exercises.
• Hands-on implementation using real-world examples.
• Interactive discussions and guided troubleshooting.

Customization Options

• To arrange customized training for this course, please contact us.

Spring WebFlux is a reactive programming module within the Spring Framework, specifically designed for creating non-blocking, event-driven web applications.

This instructor-led live training, available online or onsite, targets beginner to intermediate Java developers aiming to develop scalable and responsive applications using Spring WebFlux.

Upon completion of this training, participants will be able to:

• Grasp the core principles of reactive programming through Project Reactor.
• Construct and test non-blocking RESTful APIs utilizing Spring WebFlux.
• Integrate WebFlux with databases and third-party services.
• Apply reactive patterns to practical application scenarios.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation within a live-lab environment.

Customization Options

• To request a tailored training for this course, please contact us to arrange.

This instructor-led live training in Serbia (online or onsite) targets developers aiming to use WebFlux for developing and deploying reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive applications and services.