We're offering 20% off September Live Online classes! See which courses are applicable.   |   Details >

AccountIcon BigDataIcon BlogIcon default_resource_icon CartIcon checkmark_icon cloud_devops_icon computer_network_admin_icon cyber_security_icon gsa_schedule_icon human_resources_icon location_icon phone_icon plus_icon programming_software_icon project_management_icon redhat_linux_icon search_icon sonography_icon sql_database_icon webinar_icon

Search UMBC Training Centers


Securing Java Web Applications

+ View more dates & times
  • Overview

    This course shows Java web developers how to secure their applications and to apply best practices with regard to secure enterprise coding. Authentication, authorization, and input validation are major themes, and students get good exposure to basic Java cryptography for specific development scenarios, as well as thorough discussions of HTTPS configuration and certificate management, error handling, logging, and auditing.
    Perhaps the most eye-opening parts of the course concern common web “hacks,” or attack vectors. Students see how easy it is to leave an application unguarded against cross-site scripting (XSS), cross-site request forgery (CSRF), SQL injection, and other attack types — and learn that it’s also easy to fix such vulnerabilities and the importance of a secure development process.

  • Who Should Take This Course


    Java programming experience is essential. Servlets programming experience is required. JSP page-authoring experience is recommended but not required.

  • Why You Should Take This Course

    Upon completion of this course, students will be able to:

    • Generally, be prepared to develop secure Java web applications, or to secure existing applications by refactoring as necessary.
    • Define security constraints and login configurations that instruct the web container to enforce authentication and authorization policies.
    • Guard against common web attacks including XSS, CSRF, and SQL injection.
    • Validate user input aggressively, for general application health and specifically to foil injection and XSS attacks.
    • Configure a server and/or application to use one-way or two-way HTTPS.
    • Apply application-level cryptography where necessary.
    • Store sensitive information securely, hash user passwords, and understand the importance of salting and of using slow hashing algorithms
    • and processes, to maximize the safety of stored credentials.
    • Secure log files and establish audit trails for especially sensitive information or actions.
  • Schedule
  • Course Outline
    1. Concerns for Web Applications
    2. Authentication and Authorization
    3. Common Web Attacks
    4. Input Validation
    5. HTTPS and Certificates
    6. Application-Level Cryptography
    7. Secure Development Practices
  • FAQs
    Is there a discount available for current students?

    UMBC students and alumni, as well as students who have previously taken a public training course with UMBC Training Centers are eligible for a 10% discount, capped at $250. Please provide a copy of your UMBC student ID or an unofficial transcript or the name of the UMBC Training Centers course you have completed. Online courses are excluded from this offer.

    What is the cancellation and refund policy?

    Student will receive a refund of paid registration fees only if UMBC Training Centers receives a notice of cancellation at least 10 business days prior to the class start date for classes or the exam date for exams.

Contact Us