Secure Developer Java (Inc OWASP) Training Course

Developing secure networked applications presents challenges even for developers who have previously utilized various cryptographic building blocks, such as encryption and digital signatures. To ensure participants grasp the role and application of these cryptographic primitives, the course begins by establishing a strong foundation on the core requirements of secure communication: secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. This is complemented by an exploration of common threats that can compromise these requirements, alongside practical real-world solutions.

Given that cryptography is a cornerstone of network security, the curriculum covers the most vital algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematical theories, these concepts are presented from a developer's viewpoint, illustrating typical use cases and practical considerations, including the implementation of public key infrastructures (PKI). The course introduces security protocols across various domains of secure communication, providing an in-depth look at widely-used protocol families like IPsec and SSL/TLS.

Typical cryptographic vulnerabilities associated with specific algorithms and protocols are examined, including BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding Oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each vulnerability, the course details practical considerations and potential consequences, maintaining a focus on applicability rather than deep mathematical analysis.

Finally, recognizing that XML technology is central to data exchange for networked applications, the security implications of XML are thoroughly described. This covers the use of XML in web services and SOAP messages, as well as protective measures like XML Signature and XML Encryption. The course also addresses weaknesses in these protections and specific XML-related security issues, such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Grasp the requirements of secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain a practical understanding of cryptography
• Understand essential security protocols
• Analyze recent attacks against cryptosystems
• Identify information regarding recent related vulnerabilities
• Understand security concepts relevant to web services
• Access sources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ code demands robust defenses against malicious exploitation, memory corruption, and input validation bypasses. This program explores vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will apply secure coding guidelines, leverage static analysis tools, and utilize defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software that is resilient against cyberattacks.

Even seasoned Java developers often struggle to fully master the diverse security services provided by Java, and they are frequently unaware of the various vulnerabilities that impact web applications built with Java.

Beyond introducing the security components of Standard Java Edition, this course addresses the security challenges associated with Java Enterprise Edition (JEE) and web services. The discussion of specific services is grounded in the fundamental principles of cryptography and secure communication. Participants will engage in various exercises covering declarative and programmatic security techniques in JEE, while also exploring transport-layer and end-to-end security for web services. Through practical exercises, attendees can apply the discussed APIs and tools, gaining hands-on experience with each component.

The course also examines and explains the most common and severe programming flaws in the Java language and platform, as well as web-related vulnerabilities. In addition to typical errors made by Java developers, the identified security vulnerabilities encompass both language-specific issues and problems arising from the runtime environment. All vulnerabilities and corresponding attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and effective mitigation techniques.

Participants attending this course will

• Grasp the core concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Understand the security concepts underlying web services
• Acquire skills in utilizing various security features within the Java development environment
• Develop a practical understanding of cryptography
• Comprehend the security solutions offered by Java EE
• Learn about typical coding mistakes and strategies to avoid them
• Gain insights into recent vulnerabilities affecting the Java framework
• Acquire practical knowledge in using security testing tools
• Receive resources and further reading materials on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language that runs on the JVM (Java Virtual Machine). Key features include scripting capabilities, Domain-Specific Language (DSL) authoring, runtime and compile-time meta-programming, and support for functional programming. It is frequently used as a complement to Java.

In this instructor-led live training, participants will learn how to code in Groovy by building a sample application step-by-step.

Audience

• Developers

Course Format

• A mix of lectures, discussions, exercises, and extensive hands-on practice

This instructor-led live training in Nigeria (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand the basic programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Nigeria (online or onsite) is designed for intermediate-level Java developers who wish to design, develop, deploy, and maintain microservices-based applications using Java frameworks like Spring Boot and Spring Cloud.

Upon completion of this training, participants will be able to:

• Grasp the principles and advantages of microservices architecture.
• Construct and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Effectively secure, monitor, and scale microservices.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in Nigeria (available online or on-site) is designed for intermediate to advanced developers looking to master microservice development using Spring Boot, Docker, and Kubernetes.

Upon completing this training, participants will be able to:

• Understand the core principles of microservices architecture.
• Construct production-ready microservices using Spring Boot.
• Grasp the essential role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led, live training in Nigeria (online or onsite) is aimed at developers who wish to use Quarkus to build, test, and deploy applications, fully-powered with Java, but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in Nigeria (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led, live training in Nigeria (online or onsite) is designed for software architects and web developers who wish to use RabbitMQ as messaging middleware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Build applications using Java, Spring, and RabbitMQ.
• Design asynchronous, message-driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ.

This instructor-led, live training in Nigeria (online or onsite) is designed for web developers who wish to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring Security and JWT web tokens.

This instructor-led, live training in Nigeria (online or on-site) is designed for Java developers who want to use the Spring 5 framework to develop and deploy enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Understand and implement the latest features of Spring 5.
• Access databases via Spring applications.
• Use the new reactive web framework, WebFlow, to create reactive applications.
• Integrate Spring applications with legacy Java EE systems.
• Test and deploy enterprise-grade Spring applications.

Spring is a robust Java framework designed to simplify enterprise application development through powerful dependency injection, modular architecture, and streamlined configuration options.

This instructor-led live training (available online or onsite) targets beginner-level Java developers aiming to construct modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 alongside Java 21.

Upon completion of this training, participants will be equipped to:

• Grasp Spring’s core principles, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configure Spring applications using XML, annotations, and JavaConfig.
• Develop RESTful services leveraging Spring Boot and JPA.
• Implement CRUD operations, manage transactions, and handle data persistence.
• Utilize advanced Spring features such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical introduction followed by extensive practical exercises.
• Hands-on implementation using real-world examples.
• Interactive discussions and guided troubleshooting sessions.

Customization Options

• To request a customized training for this course, please contact us to arrange.

Spring WebFlux is a reactive programming module within the Spring Framework designed for building non-blocking, event-driven web applications.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level Java developers who wish to build scalable and responsive applications using Spring WebFlux.

By the end of this training, participants will be able to:

• Grasp the fundamentals of reactive programming with Project Reactor.
• Design and test non-blocking RESTful APIs using Spring WebFlux.
• Integrate WebFlux with databases and external services.
• Apply reactive patterns to real-world application scenarios.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led live training in Nigeria (online or onsite) is tailored for developers who want to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive applications and services.