OWASP Top 10, Java Secure Coding Follow Up, South Africa

We can host this training at your preferred location. Contact us!

This course is the next step for our participants, who completed our OWASP Top 10, Java Secure Coding Fundamentals course. This is a follow up training, meaning that in order to attend this, everyone must already have the knowledge that is covered in the Fundamentals.

This course enables our participants to gain a deeper knowledge in the field, because here we emphasize the Java-specific aspects of secure coding instead of the general vulnerabilities.

At the end of the training everyone has the possibility to take an exam, where they are able to measure their level of the gained knowledge.

Learn client-side vulnerabilities and secure coding practices
Have a practical understanding of cryptography
Learn to use various security features of the Java development environment

Client-side security
Practical cryptography
Secure communication in Java
Java security services

Client-side security

JavaScript security
Same Origin Policy
Simple requests
Preflight requests
Exercise – Client-side authentication
Client-side authentication and password management
Protecting JavaScript code
Clickjacking
- Clickjacking
- Exercise – IFrame, Where is My Car?
- Protection against Clickjacking
- Anti frame-busting – dismissing protection scripts
- Protection against busting frame busting
AJAX security
- XSS in AJAX
- Script injection attack in AJAX
- Exercise – XSS in AJAX
- XSS protection in AJAX
- Exercise CSRF in AJAX – JavaScript hijacking
- CSRF protection in AJAX

Practical cryptography

Rule #1 of implementing cryptography
Cryptosystems
- Elements of a cryptosystem
- Java Cryptography Architecture / Extension (JCA/JCE)
- Using Cryptographic Service Providers
Symmetric-key cryptography
- Providing confidentiality with symmetric cryptography
- Symmetric encryption algorithms
- Modes of operation
- Private (symmetric) key cryptography in Java
Other cryptographic algorithms
- Hash or message digest
- Hash algorithms
- SHAttered
- Hashing in Java: MessageDigest class
- MAC and password-based encryption in Java: Mac class
- Message Authentication Code (MAC)
- Providing integrity and authenticity with a symmetric key
- Random number generation
  - Random numbers and cryptography
  - Cryptographically-strong PRNGs
  - Weak and strong PRNGs in Java
  - Hardware-based TRNGs
  - Exercise RandomTest
  - Using random numbers in Java – spot the bug!
Asymmetric (public-key) cryptography
- Providing confidentiality with public-key encryption
- Rule of thumb – possession of private key
- The RSA algorithm
  - Introduction to RSA algorithm
  - Encrypting with RSA
  - Combining symmetric and asymmetric algorithms
  - Digital signing with RSA
  - Exercise Sign
Public Key Infrastructure (PKI)
- Man-in-the-Middle (MitM) attack
- Digital certificates against MitM attack
- Certificate Authorities in Public Key Infrastructure
- X.509 digital certificate
- The Java Keystore (JKS)
- Java Certification Path (CertPath)

Secure communication in Java

SSL and TLS
Usage options
Security services of TLS
SSL/TLS handshake

Java security services

Java security services – architecture

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

Upcoming Trainings

Join our public courses in our South Africa facilities. Private class trainings will be organized at the location of your preference, according to your schedule.

20 January 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

12 February 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

20 January 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

16 February 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

20 February 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

12 February 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

10 March 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

16 February 2025 (1 Day)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

OWASP Top 10, Java Secure Coding Follow Up Training Course in South Africa

Formerly known as Union of South Africa, now officially known as Republic of South Africa is the Southernmost country in Africa. South Africa's population is over 60 million people, which makes the country the world's 23rd-most populous nation. South Africa has three capital cities: executive Pretoria, judicial Bloemfontein and legislative Cape Town, while the largest city is Johannesburg. The official languages of South Africa are Afrikaans, English, Ndebele, Pedi, Sotho, Swati, Tsonga, Tswana, Venda, Xhosa and Zulu.

South Africa can be rainy from November to February, so the best time to visit South Africa is from May to September. Despite the rainy season South Africa is a year-round destination, with varying regional climates. Blyde River Canyon, Durban, Drakensberg, Kruger National Park and of course, Cape Town are the tourist attractions of the country.

Expand your IT knowledge with our comprehensive range of courses, including programming, software development, business skills, data science, cybersecurity, cloud computing and virtualization. Our skilled instructors will facilitate hands-on training and share practical insights, all conveniently conducted at your preferred location within South Africa.

OWASP Top 10, Java Secure Coding Follow Up Training in South Africa

What You Will Learn

Outline

Upcoming Trainings