Even seasoned developers often lack mastery over the security services provided by their development platforms and may remain unaware of the specific vulnerabilities affecting their projects. This course is designed for developers working with both Java and PHP, equipping them with the essential skills needed to build applications resilient against modern internet-based threats.
The course explores the layers of Java security architecture by addressing access control, authentication, authorization, secure communication, and various cryptographic functions. It also introduces PHP APIs such as OpenSSL for cryptography and HTML Purifier for input validation. On the server side, best practices are provided for hardening and configuring the operating system, web container, file system, SQL server, and PHP itself, with a particular emphasis on client-side security issues related to JavaScript, Ajax, and HTML5.
General web vulnerabilities are discussed through examples aligned with the OWASP Top Ten, covering injection attacks, script injections, session handling flaws, insecure direct object references, file upload issues, and more. Java- and PHP-specific language problems and runtime environment issues are categorized into standard vulnerability types, including missing or improper input validation, misuse of security features, incorrect error and exception handling, time- and state-related problems, code quality issues, and mobile code-related vulnerabilities.
Participants will have the opportunity to test the discussed APIs, tools, and configuration effects firsthand. The introduction of vulnerabilities is supported by hands-on exercises that demonstrate the consequences of successful attacks, show how to fix bugs and apply mitigation techniques, and introduce the use of various extensions and tools.
Participants attending this course will
- Understand fundamental concepts of security, IT security, and secure coding
- Learn about web vulnerabilities beyond the OWASP Top Ten and how to avoid them
- Gain knowledge of client-side vulnerabilities and secure coding practices
- Learn to utilize various security features within the Java development environment
- Develop a practical understanding of cryptography
- Learn to use various security features of PHP
- Understand the security concepts of web services
- Acquire practical knowledge in using security testing tools
- Learn about common coding mistakes and how to avoid them
- Stay informed about recent vulnerabilities in Java and PHP frameworks and libraries
- Receive resources and further readings on secure coding practices
Audience
Developers
Read more...
