Secure Developer Java (Inc OWASP) Training Course

Building a secure networked application is challenging, even for developers familiar with cryptographic components like encryption and digital signatures. To help participants grasp the role and use of these cryptographic tools, we first establish a strong foundation based on key secure communication requirements: authentication, integrity, confidentiality, remote identity verification, and anonymity. We also explore common threats that undermine these principles alongside practical, real-world solutions.

Since cryptography is central to network security, the course covers essential symmetric cryptography, hashing, asymmetric cryptography, and key agreement algorithms. Rather than focusing on complex mathematics, we approach these topics from a developer's viewpoint, offering typical use cases and practical guidance on aspects like public key infrastructure (PKI). We also introduce security protocols used across various secure communication domains, with detailed explanations of widely adopted protocol families such as IPsec and SSL/TLS.

The course examines common cryptographic vulnerabilities linked to specific algorithms and protocols, including BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, we outline practical implications and potential consequences without delving into deep mathematical theory.

As XML technology plays a central role in data exchange for networked applications, the course covers XML security. This includes using XML in web services and SOAP messages, as well as protective measures like XML Signature and XML Encryption. Additionally, we address weaknesses in these protections and XML-specific threats such as XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding
• Understand the requirements for secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain practical knowledge of cryptography
• Understand essential security protocols
• Recognize recent attacks targeting cryptosystems
• Learn about recent related vulnerabilities
• Comprehend web services security concepts
• Access resources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ code demands rigorous protection against malicious exploitation, memory corruption, and input validation bypasses. This program explores vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will apply secure coding guidelines, utilize static analysis tools, and employ defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software resilient against cyberattacks.

Even seasoned Java developers often do not fully master the full range of security services provided by Java, nor are they always aware of the different vulnerabilities that apply to Java-based web applications.

This course introduces the security components of Java Standard Edition, while also addressing security issues in Java Enterprise Edition (JEE) and web services. The discussion of specific services begins with the fundamentals of cryptography and secure communication. Through various exercises, participants explore declarative and programmatic security techniques in JEE, as well as both transport-layer and end-to-end security for web services. Practical exercises allow participants to actively try out the discussed APIs and tools.

The course also covers and explains the most common and serious programming flaws in the Java language and platform, along with web-related vulnerabilities. In addition to typical bugs made by Java developers, the security vulnerabilities addressed include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and associated attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and potential mitigation techniques.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Understand the security concepts of web services
• Learn how to utilize various security features of the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions within Java EE
• Learn about typical coding mistakes and how to avoid them
• Receive information on recent vulnerabilities in the Java framework
• Gain practical experience using security testing tools
• Obtain resources and further reading materials on secure coding practices

Audience

Developers

Apache Groovy is a dynamic programming language designed for the JVM (Java Virtual Machine). It offers features such as scripting, Domain-Specific Language creation, runtime and compile-time meta-programming, and functional programming. Groovy is frequently used alongside Java to enhance its capabilities.

In this instructor-led, live training session, participants will gain hands-on experience in Groovy programming by building a sample application from scratch.

Audience

• Developers

Format of the course

• A mix of lectures, discussions, exercises, and extensive hands-on practice

This instructor-led, live training in Uzbekistan (online or onsite) is designed for beginner-level developers aiming to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand fundamental programming concepts.
• Write simple Groovy scripts and utilize its core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn essential error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training in Uzbekistan (online or onsite) is tailored for intermediate-level Java developers aiming to design, develop, deploy, and maintain microservices-based applications using Java frameworks like Spring Boot and Spring Cloud.

By the end of this training, participants will be able to:

• Understand the principles and benefits of microservices architecture.
• Build and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateways.
• Secure, monitor, and scale microservices effectively.
• Deploy microservices using Docker and Kubernetes.

This instructor-led, live training in Uzbekistan (available in online or onsite formats) is designed for intermediate to advanced developers aiming to master the development of microservices using Spring Boot, Docker, and Kubernetes.

Upon completing this training, participants will be capable of:

• Grasping the core principles of microservices architecture.
• Developing production-ready microservices using Spring Boot.
• Recognizing the essential role of Docker in containerizing microservices.
• Setting up Kubernetes clusters to deploy and manage microservices.

This instructor-led live training in Uzbekistan (online or onsite) is tailored for developers who wish to use Quarkus to build, test, and deploy applications, fully leveraging Java while minimizing resource utilization.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing applications with Quarkus.
• Build, compile, and run applications in native mode using GraalVM.
• Utilize Quarkus tooling and extensions for building native applications using Maven.
• Containerize, execute, and deploy applications with Docker.

This instructor-led, live training in Uzbekistan (online or onsite) is aimed at intermediate-level to advanced-level developers and architects who wish to develop Java native applications and microservices using Quarkus with optimized memory usage and startup time.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Use GraalVM for native compilation and optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led, live training in Uzbekistan (online or onsite) is aimed at software architects and web developers who wish to use RabbitMQ as a messaging middle-ware and program in Java using Spring to build applications.

By the end of this training, participants will be able to:

• Use Java and Spring with RabbitMQ to build applications.
• Design asynchronous message driven systems using RabbitMQ.
• Create and apply queues, topics, exchanges, and bindings in RabbitMQ

This instructor-led, live training in Uzbekistan (online or onsite) is targeted at web developers who wish to build functional front-end and back-end web applications using Spring Boot, React, and Redux.

By the end of this training, participants will be able to:

• Build a front-end application with React and Redux.
• Create RESTful APIs with Spring Boot.
• Secure web services with Spring security and JWT web tokens.

This instructor-led, live training in Uzbekistan (online or on-site) is designed for Java developers who want to leverage the Spring 5 framework to develop and deploy enterprise-grade web applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5.
• Understand and implement the latest features of Spring 5.
• Access databases using Spring Applications.
• Utilise the new reactive web framework, WebFlux, to create reactive applications.
• Integrate a Spring application with legacy Java EE applications.
• Test and deploy an enterprise-grade Spring application.

Spring is a robust Java framework that streamlines enterprise application development by offering powerful dependency injection, a modular architecture, and simplified configuration options.

This instructor-led live training, available online or on-site, is designed for beginner-level Java developers who aim to create modern, production-ready web applications using the latest Spring Framework and Spring Boot 3.5.5 alongside Java 21.

Upon completion of this training, participants will be capable of:

• Grasping Spring’s core principles, including Inversion of Control (IoC), Dependency Injection (DI), and Aspect-Oriented Programming (AOP).
• Configuring Spring applications using XML, annotations, and JavaConfig.
• Developing RESTful services with Spring Boot and JPA.
• Implementing CRUD operations, managing transactions, and handling data persistence.
• Leveraging advanced Spring features such as profiles, exception handling, and data serialization.

Course Format

• A concise theoretical introduction followed by extensive practical exercises.
• Hands-on implementation using real-world examples.
• Interactive discussions and guided troubleshooting sessions.

Customization Options

• To arrange a customized training for this course, please contact us.

Spring WebFlux is a reactive programming module within the Spring Framework designed for building non-blocking, event-driven web applications.

This instructor-led, live training (available online or on-site) is tailored for beginner to intermediate-level Java developers aiming to build scalable and responsive applications using Spring WebFlux.

Upon completing this training, participants will be able to:

• Grasp the fundamentals of reactive programming with Project Reactor.
• Develop and test non-blocking RESTful APIs using Spring WebFlux.
• Seamlessly integrate WebFlux with databases and external services.
• Apply reactive design patterns to real-world application scenarios.

Course Format

• Interactive lectures and group discussions.
• Abundant hands-on exercises and practical sessions.
• Live-lab implementation for real-time experience.

Customization Options

• To request a customized version of this course, please contact us to arrange.

This instructor-led, live training in Uzbekistan (online or on-site) is designed for developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive applications and services.