Secure Developer Java (Inc OWASP) Training Course

Building a secure networked application can be challenging, even for developers who have prior experience with cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and usage of these cryptographic primitives, this course begins by establishing a solid foundation on the core requirements of secure communication: secure acknowledgement, integrity, confidentiality, remote identification, and anonymity. It also addresses common issues that may compromise these requirements, along with practical solutions used in real-world scenarios.

Since cryptography is critical to network security, the course covers essential cryptographic algorithms, including symmetric cryptography, hashing, asymmetric cryptography, and key agreement protocols. Rather than focusing on complex mathematical theories, these concepts are explained from a developer's perspective, highlighting typical use cases and practical considerations such as public key infrastructures (PKI). Additionally, security protocols across various domains of secure communication are introduced, with detailed discussions on widely-used protocol families like IPSEC and SSL/TLS.

The course also examines common cryptographic vulnerabilities associated with specific algorithms and protocols. Examples include BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each vulnerability, the practical implications and potential consequences are outlined, without delving into deep mathematical details.

Given that XML technology is central to data exchange in networked applications, the course explores the security aspects of XML. This includes using XML within web services and SOAP messages, alongside protection mechanisms like XML signature and XML encryption. It also covers vulnerabilities in these measures, as well as XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about some recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ applications demands rigorous protection against malicious exploitation, memory corruption, and input validation bypasses. This programme explores common vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will apply secure coding standards, leverage static analysis tools, and adopt defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software resilient against cyberattacks.

Even experienced Java programmers do not necessarily master all the security services provided by Java, nor are they always aware of the different vulnerabilities relevant to web applications written in Java.

Besides introducing the security components of Standard Java Edition, this course addresses security issues concerning Java Enterprise Edition (JEE) and web services. The discussion of specific services is preceded by the foundations of cryptography and secure communication. Various exercises cover declarative and programmatic security techniques in JEE, while both transport-layer and end-to-end security of web services are discussed. The use of all components is presented through several practical exercises, allowing participants to try out the discussed APIs and tools themselves.

The course also covers and explains the most frequent and severe programming flaws of the Java language and platform, as well as web-related vulnerabilities. Besides the typical bugs committed by Java programmers, the introduced security vulnerabilities cover both language-specific issues and problems stemming from the runtime environment. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and possible mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Understand security concepts of web services
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Understand security solutions of Java EE
• Learn about typical coding mistakes and how to avoid them
• Get information about some recent vulnerabilities in the Java framework
• Get practical knowledge in using security testing tools
• Get sources and further readings on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language for the JVM (Java Virtual Machine). Key features include scripting, Domain-Specific Language (DSL) authoring, runtime and compile-time meta-programming, and functional programming. It is frequently used as a complement to Java.

During this instructor-led live training, participants will learn how to program in Groovy by building a sample application step by step.

Audience

• Developers

Course Format

• A mix of lectures, discussions, exercises, and extensive hands-on practice

This instructor-led live training in Malaysia (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Grasp fundamental programming concepts.
• Compose simple Groovy scripts and leverage Groovy's core features.
• Understand and apply the core principles of object-oriented programming using Groovy.
• Learn essential error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Malaysia (online or onsite) is designed for intermediate-level Java developers who want to design, develop, deploy, and maintain microservices-based applications using Java frameworks such as Spring Boot and Spring Cloud.

Upon completing this training, participants will be able to:

• Grasp the principles and advantages of microservices architecture.
• Construct and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Effectively secure, monitor, and scale microservices.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in Malaysia (available online or onsite) is tailored for intermediate to advanced developers seeking to master the development of microservices using Spring Boot, Docker, and Kubernetes.

By the end of this training, participants will be able to:

• Comprehend microservices architecture principles.
• Build production-ready microservices using Spring Boot.
• Understand the critical role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led live training in Malaysia (online or onsite) is aimed at developers who wish to use Quarkus to build, test, and deploy applications that are fully powered by Java but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilise Quarkus tooling and extensions for building native applications using Maven.
• Containerise, execute, and deploy applications with Docker.

This instructor-led, live training in Malaysia (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led, live training in Malaysia (online or onsite) is aimed at software architects and web developers who wish to use RabbitMQ as a messaging middleware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Use Java and Spring with RabbitMQ to build applications.
• Design asynchronous message-driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ

This instructor-led live training in Malaysia (online or onsite) is designed for web developers who wish to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring security and JWT web tokens.

This instructor-led live training in Malaysia (online or onsite) is designed for Java developers who aim to use the Spring 5 framework to develop and deploy enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Comprehend and apply the latest features of Spring 5.
• Connect to databases using Spring applications.
• Utilise the new reactive web framework, WebFlux, to create reactive applications.
• Integrate Spring applications with legacy Java EE systems.
• Test and deploy enterprise-grade Spring applications.

Spring is a robust Java framework designed to streamline enterprise application development through advanced dependency injection, modular architecture, and simplified configuration mechanisms.

This instructor-led live training, available both online and onsite, is tailored for beginner-level Java developers eager to construct modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 alongside Java 21.

Upon completion of this training, participants will be equipped to:

• Grasp Spring’s core concepts, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configure Spring applications via XML, annotations, and JavaConfig.
• Develop RESTful services leveraging Spring Boot and JPA.
• Execute CRUD operations, manage transactions, and handle data persistence effectively.
• Utilise advanced Spring capabilities such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical overview followed by extensive practical exercises.
• Hands-on implementation using real-world scenarios.
• Interactive discussions and guided troubleshooting sessions.

Customisation Options

• For tailored training on this course, please contact us to make arrangements.

Spring WebFlux is a reactive programming module within the Spring Framework designed for building non-blocking, event-driven web applications.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level Java developers who wish to build scalable and responsive applications using Spring WebFlux.

By the end of this training, participants will be able to:

• Grasp the core concepts of reactive programming through Project Reactor.
• Create and test non-blocking RESTful APIs using Spring WebFlux.
• Integrate WebFlux with databases and external services.
• Apply reactive patterns to real-world application scenarios.

Course Format

• Interactive lectures and group discussions.
• Numerous exercises and practical activities.
• Hands-on implementation in a live-lab environment.

Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Malaysia (online or onsite) is targeted at developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive applications and services.