Course Overview

Is handling security within a Java container and securing your Java EE application your main concern right now? Then this course is for you!

In this course, you’ll be learning the crux of Java EE security, focusing on the HTTP Authentication Mechanism, Identity Store, and the Security Context API, which are the three core features of Java EE Security. This course is ideal for Software Developers and/or Software Engineers who are enthusiastic about becoming knowledgeable and getting practical exposure to the features and capabilities of the Java EE Security API and becoming fully equipped with the security features of Java EE and being able to design secure Java EE applications. 

By the end of this course, you’ll have all the skills and knowledge to confidently apply the security features available in Java EE to design and build your Java EE application in a secure manner.

The necessary resources for this course are in the "Resources" section of Video 1.1. You can also access them through this direct link - https://github.com/ec-council-learning/Secure-Software-Architecture-and-Design-Patterns-in-Java-EE-Part-2

What You Will Learn

  • Learn How to secure a Java EE application.
  • Learn to Use Basic HTTP Authentication.
  • Making use of Form-based and custom form-based HTTP Authentication.
  • Introduction to Servlet security.
  • Built in identity stores and implementing a custom identity store.
  • Learn How to Make use of the Security Context API.

Program Curriculum

  • Ascertaining the Importance of Security for Java EE Applications
  • Describing the Fundamentals of Security in Java EE
  • Securing the Web Module of a Java EE Application
  • Securing the EJB Module of a Java EE Application
  • Implementing Transport Level Security
  • Iden

  • Explaining the Concept Behind the Basic HTTP Authentication Mechanism
  • Implementing Basic HTTP Authentication on a Resource
  • Describing the Purpose of Using Form-based HTTP Authentication
  • Implementing Form-based HTTP Authentication on a Resource
  • Differentiat

  • Describing the @ServletSecurity Annotation and Its Attributes
  • Using the @ServletSecurity Annotation to Enforce Security Constraints on a Resource

  • Introducing the IdentityStore Interface
  • Describing the Purpose of @DataBaseIdentityStoreDefinition
  • Using the @DataBaseIdentityStoreDefinition to Configure a Basic Identity Store
  • Overriding Methods of the IdentityStore Interface to Develop a Custom Identity

  • Identifying the Need for Programmatic Security
  • Describing the Methods of the SecurityContext Interf

Load more modules

Instructor

Buddhini Samarakkody Samarakkody

Buddhini Samarakkody is a Senior Java Engineer who possesses over 11 years of industry experience working with multi-national Software Companies. She has worked with Java, Java EE tech stack on projects in domains such as Supply Chain Management, POS & Electronic Content Management. At present she is an Independent Consultant for Kerk Solutions, Sri Lanka - partner of Khutzi Software, Australia, working on ECM solutions built on top of the ELO Digital Office product, for clients based in Australia. Buddhini has also been a Visiting Lecturer in IT since 2012 at the CINEC campus in Sri Lanka, teaching & mentoring students following Pearson HNC & the University of Wolverhampton degree programs. Buddhini is also a Partner/Trainer & Consultant at eSolve Business Solutions, a company engaged in HR Consultancy and Corporate Training. She holds a B.Sc. in Computing & Information Systems from the London Metropolitan Uni. and an MBA from the Uni. of Wales. She has SCJP & SCWCD certifications from Sun Microsystems, Inc.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Empower Your Learning with Our Flexible Plans

Invest in your future with our flexible subscription plans. Whether you're just starting out or looking to enhance your expertise, there's a plan tailored to meet your needs. Gain access to in-demand skills and courses for your continuous learning needs.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering extensive resources with 600+ courses and diverse Learning Paths to enhance your skills.

$ 499.00
Billed annually or $59.00 billed monthly

What is included

  • 700+ Premium Short Courses
  • 50+ Structured Learning Paths
  • Validation of Completion with all courses and learning paths
  • New Courses added every month
Early Access Offer

Pro +

Experience immersive learning with Practice Labs, CTF Challenges, and exclusive EC-Council certifications for comprehensive skill-building.

$ 599.00
Billed annually or $69.00 billed monthly

Everything in Pro and

  • 800+ Practice Lab exercises with guided instructions
  • 150+ CTF Challenges with detailed walkthroughs
  • New Practice Labs and Challenges added every month
  • 3 Official EC-Council Essentials Certifications¹ (retails at $897!)
    Exclusive Bonus with Annual Plans

¹This plan includes Digital Forensics Essentials (DFE), Ethical Hacking Essentials (EHE), and Network Defense Essentials (NDE) certifications. No other EC-Council certifications are included.

Related Courses

1 of 8