Training SCADEMY

Training goals

code: CL-OJA | version: 1.0

This course is the next step for our participants, who completed our OWASP Top 10, Java Secure Coding Fundamentals course. This is a follow up training, meaning that in order to attend this, everyone must already have the knowledge that is covered in the Fundamentals.

This course enables our participants to gain a deeper knowledge in the field, because here we emphasize the Java-specific aspects of secure coding instead of the general vulnerabilities.

At the end of the training everyone has the possibility to take an exam, where they are able to measure their level of the gained knowledge.

Participants attending this course will:

  • Learn client-side vulnerabilities and secure coding practices
  • Have a practical understanding of cryptography
  • Learn to use various security features of the Java development environment

Audience:

  • Web developers

Conspect Show list

  1. Client-side security
    • JavaScript security
    • Same Origin Policy
    • Simple requests
    • Preflight requests
    • Exercise – Client-side authentication
    • Client-side authentication and password management
    • Protecting JavaScript code
    • Clickjacking
      • Clickjacking
      • Exercise – IFrame, Where is My Car?
      • Protection against Clickjacking
      • Anti frame-busting – dismissing protection scripts
      • Protection against busting frame busting
    • AJAX security
      • XSS in AJAX
      • Script injection attack in AJAX
      • Exercise – XSS in AJAX
      • XSS protection in AJAX
      • Exercise CSRF in AJAX – JavaScript hijacking
      • CSRF protection in AJAX
  2. Practical cryptography
    • Rule #1 of implementing cryptography
    • Cryptosystems
      • Elements of a cryptosystem
      • Java Cryptography Architecture / Extension (JCA/JCE)
      • Using Cryptographic Service Providers
      • FIPS 140-2
    • Symmetric-key cryptography
      • Providing confidentiality with symmetric cryptography
      • Symmetric encryption algorithms
      • Modes of operation
      • Private (symmetric) key cryptography in Java
    • Other cryptographic algorithms
      • Hash or message digest
      • Hash algorithms
      • SHAttered
      • Hashing in Java: MessageDigest class
      • MAC and password-based encryption in Java: Mac class
      • Message Authentication Code (MAC)
      • Providing integrity and authenticity with a symmetric key
      • Random number generation
        • Random numbers and cryptography
        • Cryptographically-strong PRNGs
        • Weak and strong PRNGs in Java
        • Hardware-based TRNGs
        • Exercise RandomTest
        • Using random numbers in Java – spot the bug!
    • Asymmetric (public-key) cryptography
      • Providing confidentiality with public-key encryption
      • Rule of thumb – possession of private key
      • The RSA algorithm
        • Introduction to RSA algorithm
        • Encrypting with RSA
        • Combining symmetric and asymmetric algorithms
        • Digital signing with RSA
        • Exercise Sign
    • Public Key Infrastructure (PKI)
      • Root of Trust Concept
        • Man-in-the-Middle (MitM) attack
        • Digital certificates against MitM attack
        • Certificate Authorities in Public Key Infrastructure
        • X.509 digital certificate
        • The Java Keystore (JKS)
        • Java Certification Path (CertPath)
  3. Secure communication in Java
    • SSL and TLS
    • Usage options
    • Security services of TLS
    • SSL/TLS handshake
  4. Java security services
    • Java security services – architecture
Download conspect training as PDF

Additional information

Prerequisites

General Java development

Difficulty level
Duration 1 day
Certificate

The participants will obtain certificates signed by SCADEMY (course completion).

Trainer

Authorized SCADEMY Trainer

Additional informations

Related courses:

  • CL-JSM Java and Web application security master course
  • CL-WTS Web application security testing
  • CL-WSC - Web application security

Note: Training come with a number of easy-to-understand exercises providing live hacking fun. By accomplishing these exercises with the lead of the trainer, participants can analyze vulnerable code snippets and commit attacks against them in order to fully understand the root causes of certain security problems. All exercises are prepared in a plug-and-play manner by using a pre-set desktop virtual machine, which provides a uniform development environment.

Other training SCADEMY | Fundamentals

Training thematically related

Security

  • Download conspect training as PDF: Check Point Deployment Administrator (CPDA)

    Check Point Deployment Administrator (CPDA) training Check Point

    available training dates
    price from: 1100 EUR
    duration: 2 days
    difficulty level: 3 of 6
    code: CP-CPDA
    version: R82.x
    2026-02-23 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-23 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-23 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-23 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-30 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-30 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-25 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-25 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-29 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-29 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
  • recommended training recommended training
    Download conspect training as PDF: Check Point Certified Security Administrator (CCSA)

    Check Point Certified Security Administrator (CCSA) training Check Point

    available training dates
    price from: 1200 EUR
    duration: 3 days
    difficulty level: 3 of 6
    code: CP-CCSA
    version: R82.x
    2025-12-19 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-01-12 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-01-12 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-02 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-02 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-02 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-02 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-13 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-13 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-27 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-27 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-04 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-04 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
  • recommended training recommended training
    Download conspect training as PDF: Check Point Certified Security Expert (CCSE)

    Check Point Certified Security Expert (CCSE) training Check Point

    available training dates
    price from: 1200 EUR
    duration: 3 days
    difficulty level: 4 of 6
    code: CP-CCSE
    version: R82.x
    2026-01-26 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-01-26 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-16 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-16 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-16 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-16 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-18 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-18 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-15 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-15 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
  • Download conspect training as PDF: CompTIA Security+ Prep Course

    CompTIA Security+ Prep Course training CompTIA

    available training dates
    price from: 1500 EUR
    duration: 5 days
    difficulty level: 2 of 6
    code: CT-SECURITY
    version: SY0-701
    2025-12-15 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-23 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-23 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-16 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-16 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-23 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-23 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-18 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-18 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-25 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-25 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
  • Download conspect training as PDF: CEH - Certified Ethical Hacker v13

    CEH - Certified Ethical Hacker v13 training EC-Council

    available training dates
    price from: 2200 EUR
    duration: 5 days
    difficulty level: 3 of 6
    code: ECC-CEH
    version: v13
    2026-01-26 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-01-26 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-16 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-16 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-23 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-23 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-16 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-16 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-18 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-18 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-22 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
  • Download conspect training as PDF: CSA - Certified SOC Analyst v2

    CSA - Certified SOC Analyst v2 training EC-Council

    available training dates
    price from: 1200 EUR
    duration: 3 days
    difficulty level: 3 of 6
    code: ECC-CSA
    version: v2
    2026-01-21 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-01-21 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-18 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-18 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-18 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-18 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-15 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-15 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-20 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-20 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-24 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-24 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
  • Download conspect training as PDF: Configuring BIG-IP F5 Advanced WAF

    Configuring BIG-IP F5 Advanced WAF training F5

    available training dates
    price from: 4300 EUR
    duration: 4 days
    difficulty level: 4 of 6
    code: F5N-AWAF
    version: v17.1
    2026-01-12 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-01-12 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-02 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-02 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-02 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-02 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-31 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-31 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-13 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-13 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-27 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-27 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
  • Download conspect training as PDF: 300-101 Radware DefensePro Level 1

    300-101 Radware DefensePro Level 1 training Radware

    available training dates
    price from: 1900 EUR
    duration: 3 days
    difficulty level: 3 of 6
    code: 300-101
    2026-01-07 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-01-07 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-04 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-02-04 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-04 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-03-04 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-01 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-04-01 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-06 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-05-06 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-10 | Kraków / Virtual Classroom HYBRID: hybrid training sign up
    2026-06-10 | Warszawa / Virtual Classroom HYBRID: hybrid training sign up

Programming

Contact form

Please fill form below to obtain more info about this training.







* Fields marked with (*) are required !!!

Information on data processing by Compendium - Centrum Edukacyjne Spółka z o.o.

TRAINING PRICE FROM 400 EUR

  • In order to propose a date for this training, please contact the Sales Department

Upcoming SCADEMY training

Training schedule SCADEMY