Secure Developer Java (Inc OWASP) Training Course

Implementing a secure networked application can be challenging, even for developers who have previously used various cryptographic building blocks (such as encryption and digital signatures). To ensure participants understand the role and usage of these cryptographic primitives, a solid foundation is provided on the main requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. The course also presents typical problems that can compromise these requirements along with real-world solutions.

As a critical aspect of network security, cryptography is thoroughly discussed, covering the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. These elements are presented from a developer's perspective, focusing on practical use-case examples and considerations related to the use of crypto, such as public key infrastructures. Security protocols in various areas of secure communication are introduced, with an in-depth discussion on widely-used protocol families such as IPSEC and SSL/TLS.

Typical cryptographic vulnerabilities are examined, including issues related to certain crypto algorithms and cryptographic protocols like BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and similar attacks, as well as the RSA timing attack. In each case, practical considerations and potential consequences are described without delving into deep mathematical details.

Finally, since XML technology is central to data exchange in networked applications, the security aspects of XML are discussed. This includes the use of XML within web services and SOAP messages, along with protection measures such as XML signature and XML encryption—along with weaknesses in these measures and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices for government

Audience

Developers, Professionals

This instructor-led training in US focuses on Apache Groovy, a dynamic JVM language designed to complement Java. Participants will learn scripting, closures, meta-programming, and object-oriented programming while constructing a sample application through hands-on exercises and practical lab work for government use cases.

This instructor-led, live training in US (online or onsite) is aimed at beginner-level developers who wish to learn the basics of Groovy Programming.

By the end of this training, participants will be able to:

• Understand the basic programming concepts.
• Write simple Groovy scripts and utilize Groovy core features.
• Understand and apply basic principles of object-oriented programming using Groovy.
• Learn basic error-handling techniques to manage common programming errors and exceptions in Groovy.

This instructor-led, live training conducted at US (online or onsite) is targeted at intermediate-level Java developers seeking to design, develop, deploy, and maintain microservices-based applications utilizing Java frameworks such as Spring Boot and Spring Cloud. The curriculum supports the creation of resilient systems for government operations.

Upon completion of this training, participants will be equipped to:

• Exhibit a thorough understanding of microservices architectural principles and their benefits.
• Develop and deploy microservices using Java and Spring Boot.
• Implement service discovery, configuration management, and API gateway solutions.
• Secure, monitor, and scale microservices effectively.
• Deploy microservices in Docker and Kubernetes environments.

This instructor-led, live training session, delivered either virtually or in person at US, is specifically designed for intermediate to advanced developers aiming to master the development of microservices using Spring Boot, Docker, and Kubernetes.

Upon completion of this training, participants will be equipped to:

• Grasp the fundamental principles of microservices architecture.
• Develop production-ready microservices leveraging Spring Boot.
• Recognize the essential function of Docker in the containerization of microservices.
• Configure Kubernetes clusters to manage the deployment and orchestration of microservices.

This instructor-led, live training session, conducted in US (online or on-site), is intended for developers aiming to utilize Quarkus for the construction, testing, and deployment of applications. The objective is to maintain full Java capability while reducing resource consumption for government systems.

Following this training, participants will be equipped to:

• Configure the necessary development environment to begin building applications with Quarkus.
• Build, compile, and run applications in native mode utilizing GraalVM.
• Apply Quarkus tooling and extensions to construct native applications using Maven.
• Containerize, execute, and deploy applications via Docker.

This instructor-led, live training conducted in US (online or onsite) is tailored for intermediate to advanced developers and architects seeking to develop Java native applications and microservices using Quarkus, emphasizing optimized memory usage and startup efficiency.

By the end of this training, participants will be able to:

• Develop high-performance, lightweight Java native applications using Quarkus.
• Build and deploy RESTful services and microservices architectures.
• Utilize GraalVM for native compilation to optimize startup and memory efficiency.
• Package and containerize applications for Kubernetes and OpenShift environments.

This instructor-led live training in US (delivered online or on-site) targets software architects and web developers who intend to utilize RabbitMQ as messaging middleware and to program in Java using the Spring framework to build robust applications.

Upon completion of this training, participants will be able to:

• Construct applications using the integration of Java, Spring, and RabbitMQ.
• Design asynchronous, message-driven systems leveraging RabbitMQ capabilities for government infrastructure.
• Configure and apply queues, topics, exchanges, and bindings within the RabbitMQ ecosystem.

This instructor-led, live training conducted in US (online or onsite) is designed for web developers seeking to build functional frontend and backend web applications for government using Spring Boot, React, and Redux.

Upon completion of this training, participants will be equipped to:

• Construct a frontend application utilizing React and Redux.
• Develop RESTful APIs using Spring Boot.
• Secure web services through Spring Security and JWT web tokens.

This instructor-led, live training program, conducted in US (online or onsite), is directed at Java developers responsible for developing and deploying enterprise web applications using the Spring 5 framework, ensuring alignment with standards for government digital services.

Upon completion of this training, participants will be prepared to:

• Install and configure the Spring 5 environment.
• Analyze and implement the most recent features of Spring 5.
• Establish database connections within Spring applications.
• Leverage the reactive web framework, WebFlux, to enhance application responsiveness.
• Integrate Spring-based solutions with legacy Java EE systems.
• Execute testing and deployment of enterprise-grade Spring applications.

This practical course provides a comprehensive overview of developing generative AI applications using Spring AI. Participants will acquire the skills necessary to integrate and configure AI models, design effective prompts, process structured responses and streams, and enhance application capabilities through Retrieval-Augmented Generation (RAG) with organizational data.

The curriculum further addresses conversation memory, AI tools, Model Context Protocol (MCP), monitoring and observability, security safeguards, as well as standard generative AI patterns and agentic workflows. Through applied exercises, participants will construct and expand Spring AI applications, exploring how to combine these capabilities to deliver production-ready AI solutions for government environments.

Spring WebFlux constitutes a reactive programming module integrated into the Spring Framework, engineered to facilitate the development of non-blocking, event-driven web services.

This instructor-led professional development program, available in online or onsite formats, is tailored for Java professionals with beginner to intermediate proficiency who seek to implement scalable and responsive application architectures using Spring WebFlux.

Upon completion of this training, personnel will be equipped to:

• Comprehend the foundational principles of reactive programming as implemented in Project Reactor.
• Design and validate non-blocking RESTful APIs leveraging Spring WebFlux.
• Establish connectivity between WebFlux applications and database systems or external services.
• Apply reactive design patterns to address practical application requirements.

Course Delivery Methodology

• Interactive instruction and facilitated discussion.
• Extensive practical exercises and skill reinforcement.
• Direct application within a live laboratory environment.

Customization Provisions

• Requests for tailored training content for this course should be directed to the designated contact point for scheduling.

This instructor-led, live training in US (online or onsite) is aimed at developers who wish to use WebFlux to develop and deploy reactive applications.

By the end of this training, participants will be able to:

• Install and configure Spring 5 and the WebFlux framework.
• Develop reactive application and services.