Certified Java and Web application security Training

This intensive 3-day course provides Java developers with the expertise to secure their web applications against common and advanced threats.
Participants will explore OWASP Top 10, SEI CERT, and Spring Security to prevent issues such as SQL Injection, XSS, Race Conditions, Log4Shell, and Spring2Shell.
Hands-on labs ensure practical application of security concepts through real-world coding exercises.

Regulatory Compliance (BDDK)

Fully aligned with the
Regulation on Banks’ Information Systems and Electronic Banking Services (Articles 20, 22, 23, 25).

Key compliance areas:

• Secure software development lifecycle (Article 20)

• Versioning and change management (Article 22)

• Security testing and vulnerability assessment (Article 23)

• Information security awareness (Article 25)

Ideal for banks, financial institutions, and regulated industries requiring compliance training.

Delegates will be able to:

• Identify and fix OWASP Top 10 vulnerabilities in Java applications.

• Implement secure coding to prevent injection, XSS, and race conditions.

• Use Java and Spring Security features effectively.

• Harden authentication and session management.

• Perform vulnerability assessments using SAST and DAST tools.

• Mitigate modern threats such as Log4Shell and Spring2Shell.

• Apply SEI CERT and Saltzer-Schroeder security principles.

Graduates of this course will be able to:

• Develop and maintain secure Java applications,

• Conduct vulnerability assessments,

• Ensure full compliance with BDDK secure coding and testing standards.