Secure Java Development (SJE)

Write secure programs: You identify common vulnerabilities in Java applications and learn how to prevent them effectively.

Contents

• XML External Entity (XXE) Injection
• Insecure File Upload
• JNDI Injection
• Insecure Deserialization
• Java Management Extensions (JMX)
• Spring Boot Actuator, Jolokia, Information leaks due to poor error handling
• Injection Attacks
• Using the Java Decompiler and Debugger

Competencies

Students are able to

• identify the most important attack vectors;
• describe the conditions required for successful attacks and the corresponding countermeasures;
• independently evaluate the effectiveness of security measures and select appropriate countermeasures; and
• apply system hardening measures.

Literature

Lecturer

• Kai Ullrich

Recommended Previous Knowledge 

• Programming 1 (PR1)
• Programming 2 (PR2)
• Experience in Java programming

Module Details

Semester	6/7
Lecture Language	German
Frequency	Not regularly
Credit Points (ECTS)	5
Course Coordinator	Prof. Thomas Smits
Duration	1 Semester
Course Achievement	None
Prerequisite for exam	None
Exam	Continuous Assessment (CA)

Weekly Hours (SWS) 

Lecture	4 SWS
Sum	4 SWS

Work Load 

Lecture	60 h
Self Study	30 h
Assignments	30 h
Exam Preparation	30 h
Sum	150 h