Secure Coding in Java

1h 2mBeginner2025-08-21

Authors

Frank P Moley III

Senior Principal Engineer at Catch&Release

Course details

In this course, Frank P Moley III—Principal Software Architect at Vertex, Inc.—shows you how to bring secure coding to the Java ecosystem. Dive into the most common security vulnerabilities that routinely appear and develop your understanding of how to mitigate and prevent these vulnerabilities when writing software. Plus, examine the process for building out a complete secure software lifecycle.

Learning objectives
List ways to ensure you are writing more secure Java code.
Implement strategies to defend against many OWASP Top 10 attack vectors.
Describe the secure lifecycle of Java applications.

Skills covered

Programming LanguagesSoftware DevelopmentOne-Off

Concepts

0. Introduction

01 - Securing Java code
02 - What you need to know

1. Injection Attacks

03 - Injection attacks
04 - Prevent SQL injection
05 - Other injection attacks
06 - Challenge - Refactor Java code susceptible to injection attacks
07 - Solution - Refactor Java code susceptible to injection attacks

2. Sensitive Data Attacks

08 - Sensitive data leak
09 - Log message leaks
10 - Exception leaks
11 - Challenge - Prevent sensitive data leaks
12 - Solution - Prevent sensitive data leaks

3. Java Access Attacks

13 - Class and package accessibility
14 - Mutability
15 - Extensibility

4. Additional Topics

16 - Build vulnerabilities
17 - Container build - Best practices
18 - Input validation
19 - Serialization

Conclusion

20 - Next Steps