Secure Developer Java (Inc OWASP) Training Course

Building a secure networked application can be challenging, even for developers who have prior experience with cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, this course first establishes a solid foundation on the core requirements of secure communication: secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also highlights common threats that compromise these requirements alongside practical, real-world solutions.

Since cryptography is a critical component of network security, the course covers essential cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematical theories, these concepts are explored from a developer's perspective, featuring typical use-case examples and practical considerations such as public key infrastructures. The course also introduces security protocols used across various domains of secure communication, with a detailed examination of widely adopted protocol families like IPSEC and SSL/TLS.

Common cryptographic vulnerabilities are discussed in relation to specific algorithms and protocols, including BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and the RSA timing attack. For each issue, practical implications and potential consequences are outlined, avoiding deep mathematical derivations.

Finally, given that XML technology is central to data exchange for networked applications, the course addresses XML security. This includes the use of XML in web services and SOAP messages, along with protective measures such as XML Signature and XML Encryption. It also covers weaknesses in these protections and XML-specific security issues, including XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about some recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices

Audience

Developers, Professionals

Developing robust C and C++ applications demands proactive defense against malicious exploitation, memory corruption, and vulnerabilities that bypass input validation. This course explores common vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will implement secure coding standards, leverage static analysis tools, and adopt defensive programming practices to remove weaknesses, ensure proper input sanitization, and build software that is resilient to cyber threats.

Even seasoned Java developers often do not fully master the diverse security services provided by Java, nor are they always aware of the various vulnerabilities that impact web applications built with Java.

In addition to introducing the security components of Standard Java Edition, this course addresses security concerns within Java Enterprise Edition (JEE) and web services. The discussion of specific services begins with the fundamentals of cryptography and secure communication. Participants will explore declarative and programmatic security techniques in JEE through various exercises, while also examining both transport-layer and end-to-end security for web services. Practical exercises allow participants to apply these APIs and tools, providing hands-on experience with all discussed components.

The course also covers and explains the most common and severe programming flaws associated with the Java language and platform, as well as web-related vulnerabilities. Beyond typical bugs committed by Java developers, the security vulnerabilities addressed include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and corresponding attacks are demonstrated through clear, understandable exercises, followed by recommended coding guidelines and potential mitigation strategies.

Participants attending this course will

• Understand the fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to avoid them
• Understand the security concepts of web services
• Learn to utilize various security features within the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions offered by Java EE
• Learn about typical coding mistakes and how to prevent them
• Gain information on recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Receive resources and further reading materials on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language that runs on the JVM (Java Virtual Machine). It offers several notable features such as scripting capabilities, domain-specific language development, runtime and compile-time metaprogramming, and support for functional programming. Groovy is frequently employed to complement Java.

During this instructor-led live training, participants will gain practical skills in Groovy programming by building a sample application step by step.

Audience

• Software Developers

Course Format

• A mix of lectures, discussions, exercises, and extensive hands-on practice

This instructor-led, live training in Kenya (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand the basic programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Kenya (online or onsite) is aimed at intermediate-level Java developers who wish to design, develop, deploy, and maintain microservices-based applications using Java frameworks like Spring Boot and Spring Cloud.

By the end of this training, participants will be able to:

• Understand the principles and benefits of microservices architecture.
• Build and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Secure, monitor, and scale microservices effectively.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in Kenya (available online or onsite) is tailored for intermediate to advanced developers seeking to master the development of microservices using Spring Boot, Docker, and Kubernetes.

By the end of this training, participants will be able to:

• Comprehend microservices architecture principles.
• Build production-ready microservices using Spring Boot.
• Understand the critical role of Docker in containerizing microservices.
• Configure Kubernetes clusters to deploy and orchestrate microservices.

This instructor-led, live training in Kenya (online or onsite) is aimed at developers who wish to use Quarkus to build, test, and deploy applications, fully-powered with Java, but with less resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in Kenya (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led, live training in Kenya (online or onsite) is designed for software architects and web developers who wish to use RabbitMQ as middleware and program in Java using Spring to build applications.

Upon completing this training, participants will be able to:

• Develop applications using Java, Spring, and RabbitMQ.
• Design asynchronous, message-driven systems using RabbitMQ.
• Create and implement queues, topics, exchanges, and bindings within RabbitMQ.

This instructor-led live training in Kenya (online or onsite) is designed for web developers who wish to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring security and JWT web tokens.

This instructor-led live training in Kenya (online or onsite) is designed for Java developers who wish to use the Spring 5 framework to develop and deploy enterprise web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Comprehend and implement the latest features of Spring 5.
• Access databases using the Spring Application.
• Utilize the new reactive web framework, WebFlow, to create reactive applications.
• Integrate Spring applications with legacy Java EE systems.
• Test and deploy enterprise-grade Spring applications.

Spring stands as a robust Java framework designed to streamline enterprise application development through powerful dependency injection, a modular structure, and efficient configuration mechanisms.

This live, instructor-led training session, available either online or in person, targets Java developers at the beginner level who aim to construct modern, production-ready web applications utilizing the latest iterations of the Spring Framework and Spring Boot 3.5.5 alongside Java 21.

Upon completion of this training, participants will be equipped to:

• Grasp the core principles of Spring, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configure Spring applications effectively using XML, annotations, and JavaConfig.
• Develop RESTful services leveraging Spring Boot and JPA.
• Execute CRUD operations, manage transactions, and oversee data persistence.
• Utilize advanced Spring capabilities such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical overview followed by extensive practical exercises.
• Practical implementation using real-world scenarios.
• Interactive dialogue and guided troubleshooting sessions.

Customization Opportunities

• For tailored training requests, please reach out to us to arrange specifics.

Spring WebFlux is a reactive programming module within the Spring Framework designed for building non-blocking, event-driven web applications.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level Java developers who wish to build scalable and responsive applications using Spring WebFlux.

By the end of this training, participants will be able to:

• Understand the fundamentals of reactive programming with Project Reactor.
• Build and test non-blocking RESTful APIs using Spring WebFlux.
• Integrate WebFlux with databases and external services.
• Apply reactive patterns to real-world application scenarios.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Kenya (online or onsite) is aimed at developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive applications and services.