Danh mục
Duocmmo Tedu Tin học văn phòng Laravel Cyberlearn Khoá học miễn phí Tất cả khoá học
Get link khoá học
Trang chủ
Development
Web Development
REST API
REST API Security with Java Spring Boot - What & How

REST API Security with Java Spring Boot - What & How

Loại khoá học: Web Development

SQL Injection, XSS prevention, HMAC, JWT, JWE, Oauth2, Okta, Denial of Service (DoS), and more about API security

image
50.000 VND
99 VND
Đầy Đủ Bài Giảng
Học Online Tiện Lợi
Kích Hoạt Nhanh 2-5 Phút
Thanh toán tự động
Được phép tải xuống

Tổng quan

Nội dung khoá học

Đánh giá

Mô tả

In this 12+ hours course, you will learn about the importance of securing your API.

In this course, you will learn basic API threat and how to prevent the threat to protect your API.

This API security course is very handy for knowing the security knowledge to keep your API secure and prevent multiple attack threats.

Not just the theory of what are the threats, in this course we will learn the hands-on implementation on API security to prevent those threats, using Java Spring boot.

To understand the code, you must be able to at least write REST API and database transaction using spring boot.


  1. We will learn how to secure API against SQL injection, XSS (Cross Site Scripting), DoS (Denial of Service).

  2. We will also learn how to do encoding, encryption, or hashing on Java Spring Boot, which is essential knowledge in security.

  3. Then, secure your API against many possible alternatives for protection : start from the most basic authentication, cookie, or up-to-date JWT token (including encrypted JWE)

  4. Learn how to utilise Okta for OAuth2 authentication, plus multi factor authentication (using Google Authenticator and email) in less than 1 hour

  5. Not just backend, see how to protect your frontend (HTML / ReactJS) from several possible threats

  6. Learn abour CORS (Cross Origin Resource Sharing)

  7. Access control list


All you get in one API security course.

Plus, you will get FREE update FOREVER!


Important!

This course uses Spring Boot version 2.x.

On late November 2022, Spring Boot 3.0.0 released. It takes time for updating the course to Spring boot 3.0.0, but I will do my best.

In the meantime, you have several options:

  • works with latest version of Spring boot 2.x, and the course should full compatible

  • works with Spring boot 3.x. Most of the courses should works, but some parts might need adjustment.

Bạn sẽ học được gì

This is NOT course on how to attack API, but course for PREVENT attack on the API

Various API security concepts, threats, and threat prevention methods

Learn about SQL Injection, XSS, token validation, JWT, OAuth2, and more

The concepts and algorithmis applicable for any programming language or framework. In this course, hands-on coding on API security will use Java Spring

Yêu cầu

  • Know about REST API concepts
  • Hands-on coding requires you to know basic Java Spring implementation for REST API. This course using Spring Web for simplicity.

Nội dung khoá học

21 sections

Introduction

3 lectures
Welcome To This Course
01:13
Course Structure & Coverage
01:43
Tips : How To Get Maximum Value From This Course
05:56

Spring Boot Version

1 lectures
Spring Boot Version in This Course
00:19

Let's Start

3 lectures
Security? Who Cares!
02:15
Code Hands On - Overview
04:26
Code Hands On - Getting Started
07:04

SQL Injection

14 lectures
SQL Injection - Threat
02:33
SQL Injection - Vulnerable Code
32:37
SQL Injection - Test Vulnerable Code
16:47
SQL Injection - Threat Prevention
04:16
SQL Injection - Safe Code 1
07:54
SQL Injection - Safe Code 2
24:51
SQL Injection - Safe Code 3
03:20
SQL Injection - Don't Tell Them
06:47
SQL Injection - JPA Vulnerable Code
13:14
SQL Injection - Test JPA Vulnerable Code
02:23
SQL Injection - Safe Code JPA
02:07
SQL Injection - Least Authority
06:11
SQL Injection - Are We Safe?
03:52
SQL In This Course
01:26

Cross Site Scripting (XSS)

9 lectures
XSS - Threat
05:22
XSS - Vulnerable Code
06:42
XSS - Test Vulnerable Code
02:46
XSS - Vulnerable Code on ReactJS
12:50
XSS - Test Vulnerable Code on ReactJS
04:06
XSS - Threat Prevention
04:33
XSS - Safe Code on Input
13:40
XSS - Safe Code on Output 1
15:02
XSS - Safe Code on Output 2
09:37

Where To Put Security Code

2 lectures
Where To Put Security Code - Ease Our Burden
12:03
Where To Put Security Code - In This Course
04:19

Denial of Service (DoS)

8 lectures
DoS - Threat
03:16
DoS - Vulnerable Code
11:30
DoS - Test Vulnerable Code
06:44
DoS - Threat Prevention
03:53
Defense in Depth
05:15
DoS - Safe Code 1
05:58
DoS - Safe Code 2
12:20
DoS - Safe Code 3
07:59

Encode, Encrypt, Hash

5 lectures
Encode, Encrypt, Hash - What & Why
08:21
Encode, Encrypt, Hash - Sample Code
47:12
Encode, Encrypt, Hash - Sample Use Case
04:25
HMAC - Data Integrity
02:19
HMAC - Sample Code
34:42

Basic Authentication

3 lectures
Basic Authentication - This Is Me
04:46
Basic Authentication - Sample Code
26:35
Basic Authentication - Helping Is (Sometimes) Bad Idea
04:11

Data Transmission

3 lectures
Data Transmission - Threat
01:19
Data Transmission - Threat Prevention
08:08
Data Transmission - HTTPS Only Please
03:45

HTTPS Importance

1 lectures
HTTPS : Red Notice!
02:03

Audit Log

3 lectures
Audit Log - Why Log?
06:02
Audit Log - Threat
02:19
Audit Log - Code Sample
18:37

Access Control List (ACL)

4 lectures
ACL - Threat
01:17
ACL - Threat Prevention
04:14
ACL - Sample Code
20:44
ACL - Further Steps
01:41

Token Authentication

8 lectures
Token Authentication - Overview
02:33
Token Authentication - Sample Code 1
22:51
Token Authentication - Threat
02:43
Token Authentication - Threat Prevention
02:45
Token Authentication - Sample Code 2
08:42
Token Authentication - Timing Attack
02:14
Token Authentication - Sample Code 3
02:24
Token Authentication - Logout
03:32

Cross Origin Resource Sharing (CORS)

3 lectures
CORS - Overview
05:34
CORS - Sample Code 1
10:54
CORS - Sample Code 2
08:10

Token Without Cookies

6 lectures
Token Without Cookies - Overview
01:52
Token Without Cookies - Sample Code 1
20:34
Token Without Cookies - Threat
01:40
Token Without Cookies - Threat Prevention
01:15
Tips : Key Storage
02:18
Token Without Cookies - Sample Code 2
06:21

JSON Web Token (JWT)

7 lectures
JWT - Overview
10:00
JWT - Sample Code 1
18:48
JWT - Threat
02:03
JWT - Threat Prevention
02:41
JWT - Sample Code 2
11:40
JWT, JWS, JWE, JOSE
02:56
JWT - Sample Code 3
16:02

API Key

2 lectures
API Key - Simple Token
01:15
API Key - Sample Code
11:24

OAuth2

4 lectures
OAuth2 - Overview
11:58
OAuth2 - Authorization Server
02:49
OAuth2 - Sample Code 1
21:36
OAuth2 - Sample Code 2
07:39

Multi Factor Authentication (MFA)

2 lectures
MFA - Overview
02:33
MFA - Sample Implementation
07:09

Resources & References

2 lectures
Resources & References : Source Code & Others
00:04
Bonus Lecture & Discount Codes
05:14

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

Khoá học liên quan

Docker từ cơ bản đến nâng cao

Docker từ cơ bản đến nâng cao

25 VND
50.000 VND
Certified Kubernetes Administrator (CKA) with Practice Tests

Certified Kubernetes Administrator (CKA) with Practice Tests

185 VND
50.000 VND
Software Architecture & Technology of Large-Scale Systems

Software Architecture & Technology of Large-Scale Systems

125 VND
50.000 VND
Python Ethical Hacking : Build tools for ethical hacking

Python Ethical Hacking : Build tools for ethical hacking

829.000 VND
50.000 VND
Mastering SQL Injection - The Ultimate Hands-On Course

Mastering SQL Injection - The Ultimate Hands-On Course

50.000 VND
Embedded System Design using UML State Machines

Embedded System Design using UML State Machines

1.399.000 VND
50.000 VND
Ultimate AWS Certified Security Specialty [NEW 2024] SCS-C02

Ultimate AWS Certified Security Specialty [NEW 2024] SCS-C02

95 VND
50.000 VND
Concurrency, Multithreading and Parallel Computing in Java

Concurrency, Multithreading and Parallel Computing in Java

90 VND
50.000 VND
Internet Security: A Hands-on Approach

Internet Security: A Hands-on Approach

1.399.000 VND
50.000 VND
ASP.NET Core Identity - Authentication & Authorization [MVC]

ASP.NET Core Identity - Authentication & Authorization [MVC]

119 VND
50.000 VND
Intune (MDM / MAM) Microsoft training course with HANDS ON

Intune (MDM / MAM) Microsoft training course with HANDS ON

1.299.000 VND
50.000 VND
【超実践】ビジネス要件分析・基本設計・詳細設計をやり抜く実践ワーク講座

【超実践】ビジネス要件分析・基本設計・詳細設計をやり抜く実践ワーク講座

26 VND
50.000 VND
AWS Certified Cloud Practitioner (Tiếng Việt)

AWS Certified Cloud Practitioner (Tiếng Việt)

1.399.000 VND
50.000 VND
Microsoft 365 Security Admin Course with practice SIMs

Microsoft 365 Security Admin Course with practice SIMs

90 VND
50.000 VND
Game Hacking Explained | Game Hacking with Cheat Engine

Game Hacking Explained | Game Hacking with Cheat Engine

799.000 VND
50.000 VND
Khám Phá Tất Cả Những Đặc Tính ASP Net Core MVC

Khám Phá Tất Cả Những Đặc Tính ASP Net Core MVC

55 VND
50.000 VND
image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.

Get khoá học cho tôi