Secure Coding Practices Course

Course Code: IN 751
Course Abstract:

This course teaches participants how to make use of the various security features of the Java/J2EE platform. Key features include configuration of applications for authentication, authorization and use of SSL. Secure coding practices are discussed to help avoid falling victim to cross-site scripting and data injection attacks. The course concludes with a short look at Secure Assertion Markup Language and its use within a service-oriented architecture.

Audience:

This course is designed for developers interested in securing their applications or those involved in IT security-related fields.   

Duration: 1 day
Learning Outcomes:

Upon completion of this course, the participant will be able to:

 

> Develop and Secure Web Applications incorporating authentication and authorization

> Use SSL to make secure network connections

Course Topics:

Security Overview

Java Security Architecture

Access Control and Policy Files

Security Manager and Application Permissions

Public and Private Keys

Digital Signatures

Digital Certificates

Message Digests

 

Authentication  Mechanisms

Basic and Form Authentication

Authentication vs. Authorization

Lazy Authentication

User Registries and LDAP Servers

JAAS

Exercise – Configuring and Authenticating a Web Application

 

Declarative Authorization

Container Based Security

Security: Declarative and Programmatic

Security Roles and Role Mappings

Exercise – Utilizing Form-based Authentication

 

 

Secure Coding Practices

Security Levels

Secure Coding Practices

Input Validation

Configuring and Implementing with the Struts Validator

Injection Flaws

Handling Cross-Site Scripting Conditions

Exercise – Utilizing Form-based Authentication

 

Secure Sockets Layer 

Secure Sockets Layer (SSL) Basics

SSL Key Exchange

Java Secure Sockets Extension (JSSE)

Exercise – Enabling SSL in a Web Server Environment

 

Defining Web Services Security

WebSphere Security Model for Web Services

Identifying Security Challenges and Threats for Web Services

WS-Security Authentication

Security Assertion Markup Language (SAML)
Prerequisites:

A typical candidate should have a basic experience with object-oriented design, Java development and TCP/IP networking

Note: All fields are required
At the present time we do not offer training for individuals or groups less then 6 individuals. We apologize for any inconvenience.
We Value Your Privacy!

Ready to get started or in need of more information? Contact us today.

Go To Blog Virtual Learning