Even seasoned programmers may not fully grasp the diverse security services provided by their development platforms, nor be completely aware of the vulnerabilities pertinent to their projects. This course is designed for developers working with Java and PHP, equipping them with crucial skills needed to fortify their applications against modern internet-based threats.
The various layers of Java's security architecture are explored, including access control, authentication, authorization, secure communication, and cryptographic functions. Additionally, several APIs useful for securing PHP code are introduced, such as OpenSSL for encryption and HTML Purifier for input validation. On the server side, best practices for hardening and configuring the operating system, web container, file system, SQL server, and PHP itself are covered. Special attention is given to client-side security issues related to JavaScript, Ajax, and HTML5.
Common web vulnerabilities are examined through examples aligned with the OWASP Top Ten, illustrating various injection attacks, script injections, session handling weaknesses, insecure direct object references, file upload issues, and more. Java- and PHP-specific language problems and runtime environment challenges are categorized into standard vulnerability types such as missing or improper input validation, incorrect use of security features, flawed error and exception handling, time- and state-related issues, code quality concerns, and mobile code vulnerabilities.
Participants have the opportunity to experiment with the discussed APIs, tools, and configuration effects firsthand. The introduction of vulnerabilities is supported by practical exercises that demonstrate the consequences of successful attacks, show how to fix bugs, apply mitigation techniques, and utilize various extensions and tools.
Upon completion of this course, participants will
- Comprehend fundamental security concepts in IT and secure coding practices
- Be aware of web vulnerabilities beyond the OWASP Top Ten and how to prevent them
- Master client-side security issues and secure coding techniques
- Utilize various security features within the Java development environment effectively
- Possess practical knowledge in cryptography
- Leverage PHP's security features proficiently
- Understand web service security concepts
- Gain hands-on experience with security testing tools
- Avoid typical coding mistakes and learn preventive measures
- Stay updated on recent vulnerabilities in Java and PHP frameworks and libraries
- Receive resources for further reading on secure coding practices
Audience
Developers
Read more...
