Securing Java Web Services Course

Course Summary

The Securing Java Web Services training course is designed to demonstrate the knowledge needed to develop secure Web services.

The course begins by exploring the Java Application Programming Interface for Extensible Markup Language-based Remote Procedure Call (JAX-RPC) web services. Next, it describes how to add Web Services (WS)-Security headers, signing, and encrypting message content. The course concludes with a lesson on passing Security Assertion Markup Language (SAML) assertions among various parties to a messaging scenario.

Purpose

Learn how to secure Java-based web services.

Audience

Java Web Services developers needing to harden their service offerings.

Role

Software Developer

Skill Level

Advanced

Style

Workshops

Duration

4 Days

Related Technologies

Download

Productivity Objectives:

Describe the challenges of securing web services
Interpret the security standards used
Administer security authentication

Learn About Virtual Training

Request Information

Get your team upskilled or reskilled today. Chat with one of our experts to create a custom training proposal. Fully customized at no additional cost.

If you are not completely satisfied with your training class, we'll give you your money back.

about our training

Real-World Content

Project-focused demos and labs using your tool stack and environment, not some canned "training room" lab.
Expert Practitioners

Industry experts with 15+ years of industry experience that bring their battle scars into the classroom.
Experiential Learning

More coding than lecture, coupled with architectural and design discussions.
Fully Customized

One-size-fits-all doesn't apply to training teams. That's where we come in!

What You'll Learn

In the Securing Java Web Services training course, you'll learn:

Fundamentals
- Why and what?
- Characteristics of application security
- Basic security mechanisms
Basic Security at the EE level
- Role-based authentication
- Specify security constraints
- Programmatic security
- Declarative security
Challenges with Securing XML-Based Services
- Challenges and pitfalls
- WS-I Basic Security Profile
- Standards (WS-Security, wS-SecurityPolicy, SAML)
Using WS-Security
- Define and analyze security
- Asymmetric vs symmetric encryption
- Sign messages and files
- Encrypt files
Using WS-Policy
- Define and analyze the policy
- Create policies
- Work with WS-SecurityPolicy
- Attachment techniques
Authentication
- XML Security Tokens
- Signed Security Tokens (X.509 and Kuberos)
- Unsigned security tokens
- Utilize interceptors
Best Practices