Welcome to the wiki for the Secure Programming in Java training.

This training deals with the security features in the Java programming language, common coding pitfalls with respect to security and advice on prevening these from happening. The training follows the "find flaw, exploit, fix" pattern with Java source examples.

Java and other technologies are trademarks of their respective owners.

The contents of this wiki are licensed under CC BY-SA 4.0.

Contents are on the wiki and source code (demos, skeleton code for tasks) are in the repository. You can clone the repository by issuing

git clone https://github.com/razvand/secure-programming-java.git

This training is heavily based on the excellent The CERT Oracle Secure Coding Standard for Java. An up-to-date web version of the book is here. Be sure to consult it for extensive coverage on writing secure Java code.

Also check the Secure Coding Guidelines for Java SE.

1. Security Concepts
2. Java Security Features
3. Input Validation
4. Data Leaking
5. Files
6. Strings
7. Integers
8. Program Analysis
9. Unit Testing
10. Security Components