Optimizing Java EE 8 Training Course

GlassFish Administration Training introduces participants to the secrets of the installation, configuration, management, monitoring GlassFish server. Training is open to future GlassFish server administrators.

GlassFish is an open-source application server. This three-day course provides an introduction to administering GlassFish Server with Java EE applications.

This instructor-led, live training in Peru (online or onsite) is aimed at developers who wish to install, manage, and implement Java EE 7 to develop enterprise applications.

By the end of this training, participants will be able to create, manage, implement, deploy, and secure enterprise applications and web services using Java EE 7.

This instructor-led, live training in Peru (online or onsite) is aimed at developers who wish to use Java EE 8's new features to build cloud applications.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing.
• Understand the concepts and architecture behind Java Enterprise Edition (JEE).
• Create a sample cloud application (or web service).
• Interface an application with a database.
• Write and manage stateful components using dependency injection.
• Write integration tests for Java EE components.

This instructor-led, live training in Peru (online or onsite) is aimed at developers who wish to use Java EE 8 to build and deploy cloud-ready enterprise applications, leveraging advanced Java technologies and APIs.    

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing enterprise applications with Java EE 8.
• Implement business logic for designing and building business-oriented applications.
• Integrate microservices with Java EE 8 components to transform single-tiered applications into highly scalable and cloud-ready applications.
• Understand and apply Java EE 8 design patterns and coding best practices.

This instructor-led, live training in Peru (online or onsite) is aimed at developers who wish to containerize their Java EE 8 applications and run them as microservices in the cloud.

By the end of this training, participants will be able to:

• Build and deploy Java microservices in Docker containers.
• Manage Docker containers using Kubernetes.
• Integrate microservices with an existing monolithic system.
• Monitor, test, and secure microservices.
• Troubleshoot containers and orchestration environments.

This 4-day course is for programmers who already know the Java language and wish to exploit the Enterprise Java Beans 2.0 technology while becoming aware of the security implications of distributing applications. This course has a large practical component which includes developing an e-commerce application based on Enterprise Java Beans. The course uses the JBoss Application Server.

This instructor-led, live training in Peru (online or onsite) covers the essentials of installing, configuring, securing, optimizing and managing a Resin application server.

By the end of this training, participants will be able to:

• Have a firm understanding of Resin's architecture, features and capabilities.
• Have the practice needed to deploy and manage their own Resin application server.

Apache TomEE is a certified Java Enterprise Edition (EE) stack developed on top of Tomcat (TomEE = Tomcat + aditional Java EE features). These integrations facilitate writing code, testing business logic, configuring container-managed resources, and administering the server.

In this instructor-led, live training, participants will learn how to install, configure, manage, troubleshoot and optimize a TomEE application server.

Audience

• Developers
• System administrators
• DevOps Engineers

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice

During the training participant will know the specific use of selected issues, the basic problems encountered when using them, and the role of the application model. The training also includes a basic knowledge of the language standard library functions. Training requires knowledge of the development environment IDE used to build Java applications (e.g.. Eclipse, Netbeans). Training does not include a user interface issues.

This instructor-led, live training in Peru (online or onsite) is aimed at developers who wish to learn and apply the basics of Continuous Integration for Java.

By the end of this training, participants will be able to:

• Learn and understand CI for a Java project.
• Build a CI system for Java.

To serve in the best way heterogeneous development groups that are using various platforms simultaneously during their everyday work, we have merged various topics into a combined course that presents diverse secure coding subjects in didactic manner on a single training event. This course combines C/C++ and Java platform security to provide an extensive, cross-platform secure coding expertise.

Concerning C/C++, common security vulnerabilities are discussed, backed by practical exercises about the attacking methods that exploit these vulnerabilities, with the focus on the mitigation techniques that can be applied to prevent the occurrences of these dangerous bugs, detect them before market launch or prevent their exploitation.

Security components and service of Java are discussed by presenting the different APIs and tools through a number of practical exercises where participants can gain hands-on experience in using them. The course also covers security issues of web services and the related Java services that can be applied to prevent the most aching threats of the Internet based services. Finally, web- and Java-related security vulnerabilities are demonstrated by easy-to-understand exercises, which not only show the root cause of the problems, but also demonstrate the attack methods along with the recommended mitigation and coding techniques in order to avoid the associated security problems.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Realize the severe consequences of unsecure buffer handling
• Understand the architectural protection techniques and their weaknesses
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities in various platforms, frameworks and libraries
• Get sources and further readings on secure coding practices

Audience

Developers

Even experienced Java programmers are not mastering by all means the various security services offered by Java, and are likewise not aware of the different vulnerabilities that are relevant for web applications written in Java.

The course – besides introducing security components of Standard Java Edition – deals with security issues of Java Enterprise Edition (JEE) and web services. Discussion of specific services is preceded with the foundations of cryptography and secure communication. Various exercises deal with declarative and programmatic security techniques in JEE, while both transport-layer and end-to-end security of web services is discussed. The use of all components is presented through several practical exercises, where participants can try out the discussed APIs and tools for themselves.

The course also goes through and explains the most frequent and severe programming flaws of the Java language and platform and web-related vulnerabilities. Besides the typical bugs committed by Java programmers, the introduced security vulnerabilities cover both language-specific issues and problems stemming from the runtime environment. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Understand security concepts of Web services
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Understand security solutions of Java EE
• Learn about typical coding mistakes and how to avoid them
• Get information about some recent vulnerabilities in the Java framework
• Get practical knowledge in using security testing tools
• Get sources and further readings on secure coding practices

Audience

Developers

Even experienced programmers do not master by all means the various security services offered by their development platforms, and are likewise not aware of the different vulnerabilities that are relevant for their developments. This course targets developers using both Java and PHP, providing them essential skills necessary to make their applications resistant to contemporary attacks through the Internet.

Levels of Java security architecture are walked through by tackling access control, authentication and authorization, secure communication and various cryptographic functions. Various APIs are also introduced that can be used to secure your code in PHP, like OpenSSL for cryptography or HTML Purifier for input validation. On server side, the best practices are given for hardening and configuring the operating system, the web container, the file system, the SQL server and the PHP itself, while a special focus is given to client-side security through security issues of JavaScript, Ajax and HTML5.

General web vulnerabilities are discussed by examples aligned to the OWASP Top Ten, showing various injection attacks, script injections, attacks against session handling, insecure direct object references, issues with file uploads, and many others. The various Java- and PHP-specific language problems and issues stemming from the runtime environment are introduced grouped into the standard vulnerability types of missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues and mobile code-related vulnerabilities.

Participants can try out the discussed APIs, tools and the effects of configurations for themselves, while the introduction of vulnerabilities are all supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct the bugs and apply mitigation techniques, and introducing the use of various extensions and tools.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Learn to use various security features of PHP
• Understand security concepts of Web services
• Get practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
• Get sources and further readings on secure coding practices

Audience

Developers

Description

The Java language and the Runtime Environment (JRE) was designed to be free from the most problematic common security vulnerabilities experienced in other languages, like C/C++. Yet, software developers and architects should not only know how to use the various security features of the Java environment (positive security), but should also be aware of the numerous vulnerabilities that are still relevant for Java development (negative security).

The introduction of security services is preceded with a brief overview of the foundations of cryptography, providing a common baseline for understanding the purpose and the operation of the applicable components. The use of these components is presented through several practical exercises, where participants can try out the discussed APIs for themselves.

The course also goes through and explains the most frequent and severe programming flaws of the Java language and platform, covering both the typical bugs committed by Java programmers and the language- and environment-specific issues. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Learn about typical coding mistakes and how to avoid them
• Get information about some recent vulnerabilities in the Java framework
• Get sources and further readings on secure coding practices

Audience

Developers