EIEIOTECHNOVATION
← Training programmes

EIEIO / CYBERSECURITY

Java Security

Course outline

3 days

Duration

3 days

Chapter 1 Java Application Security

  • What Is Security?
  • Software Used in This Book
  • The Java Sandbox
  • Security Debugging
  • Summary

Chapter 2 The Default Sandbox

  • Elements of the Java Sandbox
  • Permissions
  • Keystores
  • Code Sources
  • Policy Files
  • The Default Sandbox
  • The java.security File
  • Comparison with Previous Releases
  • Summary

Chapter 3 Java Language Security

  • Java Language Security Constructs
  • Enforcement of the Java Language Rules
  • Comparisons with Previous Releases
  • Summary

Chapter 4 The Security Manager

  • Overview of the Security Manager
  • Operating on the Security Manager
  • Methods of the Security Manager
  • Comparison with Previous Releases
  • Summary

Chapter 5 The Access Controller

  • The CodeSource Class
  • Permissions
  • The Policy Class
  • Protection Domains
  • The AccessController Class
  • Guarded Objects
  • Comparison with Previous Releases
  • Summary

Chapter 6 Java Class Loaders

  • The Class Loader and Namespaces
  • Class Loading Architecture
  • Implementing a Class Loader
  • Miscellaneous Class Loading Topics
  • Comparison with Previous Releases
  • Summary

Chapter 7 Introduction to Cryptography

  • The Need for Authentication
  • The Role of Authentication
  • Cryptographic Engines
  • Summary

Chapter 8 Security Providers

  • The Architecture of Security Providers
  • The Provider Class
  • The Security Class
  • The Architecture of Engine Classes
  • Comparison with Previous Releases
  • Summary

Chapter 9 Keys and Certificates

  • Keys
  • Generating Keys
  • Key Factories
  • Certificates
  • Keys, Certificates, and Object Serialization
  • Comparison with Previous Releases
  • Summary

Chapter 10 Key Management

  • Key Management Terms
  • The keytool
  • The Key Management API
  • A Key Management Example
  • Secret Key Management
  • Comparison with Previous Releases
  • Summary

Chapter 11 Message Digests

  • Using the Message Digest Class
  • Secure Message Digests
  • Message Digest Streams
  • Implementing a MessageDigest Class
  • Comparison with Previous Releases
  • Summary

Chapter 12 Digital Signatures

  • The Signature Class
  • Signed Classes
  • Implementing a Signature Class
  • Comparison with Previous Releases
  • Summary

Chapter 13 Cipher-Based Encryption

  • The Cipher Engine
  • Cipher Streams
  • Sealed Objects
  • Comparison with Previous Releases
  • Summary

Chapter 14 SSL and HTTPS

  • An Overview of SSL and JSSE
  • SSL Client and Server Sockets
  • SSL Sessions
  • SSL Contexts and Key Managers
  • Miscellaneous SSL Issues
  • The HTTPS Protocol Handler
  • Debugging JSSE
  • Summary

Chapter 15 Authentication and Authorization

  • JAAS Overview
  • Simple JAAS programming
  • Simple JAAS Administration
  • Advanced JAAS Topics
  • Summary
  • Appendix The java.security File
  • Appendix Security Resources
  • Security Bugs
  • Third-Party Security Providers
  • Security References
  • Appendix Identity-Based Key Management
  • Javakey
  • Identities
  • Identity Scopes
  • Key Management in an Identity Scope
  • Summary
  • Appendix The Secure Java Container
  • The 1.1-Based Class Loader
  • The 1.1-Based Security Manager
  • Running Secure Applications
  • Summary
  • Appendix Implementing a JCE Security Provider
  • Appendix Quick Reference
  • Package java.security
  • Package java.security.cert
  • Package java.security.interfaces
  • Package java.security.spec
  • Package javax.crypto
  • Package javax.crypto.interfaces
  • Package javax.crypto.spec
  • Package javax.net
  • Package javax.net.ssl
  • Package javax.security.auth
  • Package javax.security.auth.callback
  • Package javax.security.auth.login
  • Package javax.security.auth.spi
  • Package javax.security.cert
  • Package com.sun.net.ssl
  • Package com.sun.security.auth
  • Package com.sun.security.auth.login
  • Package com.sun.security.auth.module
  • Miscellaneous Packages
  • Colophon

Programme scope, delivery arrangements and suitability are confirmed during enquiry.