Course Overview

Secure designs are essential to building and deploying secure Java programs. But, even the best designs can result in insecure programs if developers are not aware of the numerous potential security pitfalls in Java programming.

This course begins with a detailed explanation of common programming errors encountered in Java. Further, it takes you through security issues intrinsic to Java programming languages and associated libraries. Later you will gather insights on poor programming practices that lead to vulnerable code and teaches how to code securely and maintain secure development practices throughout the software development lifecycle. In this course, you will gain knowledge on input validation defenses that can be used to protect against common application vulnerabilities, as well as learn to conduct application security testing for web applications to assess vulnerabilities. In addition, you will learn how to secure Java applications by using the Spring Security framework, a powerful and highly customizable authentication, and an access-control framework.

By the end of this course, you will be able to drive the development of a holistic application security program in Java.

What You Will Learn

  • Fundamentals of creating secure code in Java
  • Secure design and development for Java applications
  • Security best practices for Java applications
  • Securely managing errors in Java code
  • Performing application security testing for Java applications

Program Curriculum

  • Understanding Application Security, Threats, and Attacks
  • Historical Vulnerabilities and Exploits
  • The Java Security Model
  • $7 Million Cybersecurity Scholarship by EC-Council
  • Chapter 1 Quiz

  • Introduction to Secure Design
  • Gathering Security Requirements
  • Application Threat Modeling
  • Secure Application Design and Architecture
  • Secure Deployment and Maintenance
  • Chapter 2 Quiz

  • Introduction to Java Cryptography
  • Using Java Cryptography Architecture and Third-Party APIs
  • Common Cryptographic Errors
  • Chapter 3 Quiz

  • Introduction to Java Exceptions
  • Failing to Properly Handle Exceptions
  • Data Leaks in Error Messages
  • Chapter 4 Quiz

  • Introduction to Concurrency
  • The Java Memory Model
  • Concurrency and Race Condition Vulnerabilities
  • Chapter 5 Quiz

  • Introduction to Java Web Applications
  • Securing Communications with Java Secure Socket Extension (JSSE)
  • Web Service Attacks and Security
  • Input Sanitization and Validation
  • Chapter 6 Quiz

  • Introduction to Authentication and Authorization
  • Java Authentication and Authorization Service (JAAS)
  • Authentication and Access Control with the Spring Security Framework
  • Chapter 7 Quiz

  • Introduction to Application Security Testing
  • Manual Code Review
  • Using Static Analysis Tools
  • Dynamic Application Security Testing
  • Integrating Code Review into the SDLC
  • Chapter 8 Quiz
Load more modules

Instructor

Howard Poston

Howard Poston has over a decade of experience in C, C++, Java programming and a background in cybersecurity. He is a blockchain and cybersecurity trainer, writer, consultant, and researcher and has a Master’s degree in Cyber Operations, and is a Certified Ethical Hacker. Howard also has experience in teaching online courses, having created and delivered half a dozen different courses live, remotely, and on-demand on different cybersecurity topics

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Fastest Way to Level Up Your Cybersecurity Skills

Invest in your future with flexible subscription plans that give you access to the world’s largest online cybersecurity course library. Whether you're exploring cybersecurity courses for beginners or advancing your expertise,
access in-demand courses, practical labs, and CTF challenges designed to support continuous learning.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Build your cybersecurity skills with 900+ bite-sized courses and curated learning paths designed for continuous learning.

$ 69.00
Billed monthly or $599.00 billed annually

What is included

  • 880+ Premium Short Courses
  • 70+ Structured Learning Paths
  • Validation of Completion with all courses and learning paths
  • New Courses added every month
Early Access Offer

Pro +

Develop real-world cybersecurity skills through hands-on labs and CTF challenges designed for practical learning.

$ 79.00
Billed monthly or $699.00 billed annually

Everything in Pro, Plus:

  • 1600+ Hands-on lab exercises with guided instructions
  • 150+ CTF Challenges with detailed walkthroughs
  • New Hands-on Labs and Challenges added every month

Related Courses

1 of 50