Securing Java Web Applications Version 5.0 Courses and other IT courses from TEKsystems Education Services

Note: All fields are required

First Name:

Last Name:

Company:

Title:

Email Address:

Phone Number:

Address:

City:

State:

Zip Code:

Which Topic(s) Currently Interests Your Organization:

Tell Us More:

I have an immediate training or educational service need and I wish to be contacted today

I am a current TEKsystems Education Services client and wish to speak to someone

I have a training budget approved and I am ready to talk to someone about the details of my organization’s training need

I do not have an approved training budget, but I have a need and would like to talk to TEKsystems Education Services about their solutions

Unfortunately, I do not have a group training request

At the present time we do not offer training for individuals or groups less then 6 individuals. We apologize for any inconvenience.

My Delivery Method Needed Is:

Instructor-Led Classroom Training

Instructor-Led Virtual Training

Self-Paced Online Training

We Value Your Privacy!

Course Code:	IN 775
Course Abstract:	This advanced course shows experienced developers of Java web applications how to secure those applications and to apply best practices with regard to secure enterprise coding. Authentication, authorization, and input validation are major themes, and participants get good exposure to basic Java cryptography for specific development scenarios, as well as thorough discussions of HTTPS configuration and certificate management, error handling, logging, and auditing.
Audience:	This course is designed for individuals who are Java Web application developers.
Duration:	3 days
Learning Outcomes:	Upon completion of this course, the participant will be able to: > Prepare to develop secure Java web applications, or to secure existing applications by refactoring as necessary. > Define security constraints and login configurations that instruct the web container to enforce authentication and authorization policies. > Validate user input aggressively, for general application health and specifically to foil injection and XSS attacks. > Configure a server and/or application to use one-way or two-way HTTPS. > Apply application-level cryptography where necessary. > Secure log files and establish audit trails for especially sensitive information or actions
Course Topics:	Chapter 1. Secure Web Applications Threats and Attack Vectors Server, Network, and Browser Vulnerabilities Secure Design Principles GET vs. POST Container Authentication and Authorization HTML Forms Privacy Under /WEB-INF HTTP and HTTPS Other Cryptographic Practices SOA and Web Services The OWASP Top 10 Chapter 2. Authentication and Authorization HTTP BASIC and DIGEST Authentication Schemes Declaring Security Constraints User Accounts Safeguarding Credentials in Transit Replay Attacks Authorization over URL Patterns Roles FORM Authentication Login Form Design EJB Authorization Programmatic Security Programmatic Security in JSF Chapter 3. Secure Application Design Single Points of Decision Cross-Site Scripting Validation vs. Output Escaping Forceful Browsing Cross-Site Request Forgery Request Tokens Injection Attacks Protections in JDBC and JPA Session Management Taking Care of Cookies Validating User Input Validation Practices Regular Expressions JSF Validation Chapter 4. HTTPS and Certificates Digital Cryptography Encryption SSL and Secure Key Exchange Hashing Signature Keystores Keytool Why Keys are not enough X.509 Certificates Certificate Authorities Obtaining a Signed Certificate Configuring HTTPS Client-Side Certificates and Two-Way SSL PKCS #12 and Trust Stores CLIENT-CERT Authentication Chapter 5. Application-Level Cryptography The Java Cryptography Architecture Secure Random Number Generation The KeyStore API The Signature Class The SignedObject Class The MessageDigest Class The Java Cryptography Extensions The SecretKey and KeyGenerator Types The Cipher Class Choosing Algorithms and Key Sizes Dangerous Practices Chapter 6. Secure Development Practices Secure Development Cycle Error Handling and Information Leakage Failing to a Secure Mode Logging Practices Appropriate Content for Logs Auditing Strategies: Filters, Interceptors, and Command Chains Penetration Testing Back Doors Appendix A. Learning Resources
Prerequisites:	Java programming experience is essential, servlets programming experience is required, and JSP page-authoring experience is recommended but not required.

Securing Java Web Applications Version 5.0 Course

Hot Courses

Top Skills

Testimonials