Java 5: Security Fundamentals

Upcoming Class Dates

Course Specifications

Course number: 085594
Software: Java
Course length: 2.0 day(s)

Course Description

As a Java programmer, you have created applications and applets. You need to ensure that these applications are secure. In this course, you will add security features to your application so that you can prevent unwanted access and protect valuable assets, yet balance the needs for security and usability.

Course Objective: You will add security features to applets and applications.

Target Student: This course is designed for proficient Java programmers who need to create secure applications, encrypt data, authorize users, sign applications, or add other security-related functionality to their applications.

Prerequisites: Students taking this course should be proficient at creating applications that include graphical user interfaces, threading, and networking features using Java 5.0. At a minimum, they should have taken Java 2: Programming Language - Third Edition and Java 5: Advanced Programming.

Performance-Based Objectives

Upon successful completion of this course, students will be able to:

• prepare to secure an application.
• establish user-based security by which you can authenticate and authorize users of an application.
• encrypt data.
• ensure application integrity.
• secure network communications between clients and servers.

Course Content

Lesson 1: Preparing to Secure an Application

Topic 1A: Plan Application Security

Topic 1B: Configure Resource Access Permissions

Lesson 2: Establishing User-Based Security

Topic 2A: Authenticate Users

Topic 2B: Authorize Users

Lesson 3: Encrypting Data

Topic 3A: Encrypt Data Using a Symmetric Cipher

Topic 3B: Decrypt Data Encrypted with a Symmetric Cipher

Topic 3C: Encrypt Data Using an Asymmetric Cipher

Topic 3D: Decrypt Data Encrypted with an Asymmetric Cipher

Topic 3E: Secure Data Using Session Key Cryptography

Topic 3F: Secure Code with Sealed Objects

Lesson 4: Ensuring Application Integrity

Topic 4A: Authenticate Data Using Digests

Topic 4B: Authenticate Data Using Public Key Cryptography

Topic 4C: Verify a Certificate Chain

Topic 4D: Authenticate Data with Signed Objects

Topic 4E: Authenticate Untrusted Code

Topic 4F: Ensure Package Integrity

Lesson 5: Securing Network Communications

Topic 5A: Secure Exchange Using SSL

Topic 5B: Secure Network Communication Using GSS