Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

Server-Side Request Forgery Prevention in Java and Spring Boot

via CodeSignal

Overview

Understand and mitigate the risks of Server-Side Request Forgery (SSRF) in Spring Boot applications. This course covers detection, prevention, secure coding practices, and more.

Syllabus

  • Unit 1: Introduction to SSRF
    • Building an SSRF Vulnerability Detector
    • Detecting Unsafe URL Schemes
    • Combining URL Validation and Security Checks
    • Protecting Server-Side Requests with URL Validation
  • Unit 2: Preventing SSRF in Java Web Applications
    • Implementing Basic Input Validation for SSRF Protection in Spring Boot
    • Implementing URL Parsing and Protocol Validation
    • Implementing Domain Whitelist Validation
    • Block Requests to Private IP Addresses
    • Comprehensive SSRF Defense Implementation
  • Unit 3: Monitoring and Responding to SSRF Incidents
    • Implementing Request Logging for SSRF Attack Detection
    • Enhancing SSRF Detection Patterns
    • Configure Email Alerting with Environment Variables for SSRF Detection
    • SSRF Incident Logging System
    • Building an Admin Incidents API with Filtering
  • Unit 4: Security Logging and Monitoring
    • Implementing HTTP Request Logging for Security Monitoring
    • Configure Separate Error and Combined Log Files in Logback
    • Implementing Custom SSRF Detection Filter in Spring Boot
    • Real-Time Log Monitoring with WebSocket
    • Email Alert System for SSRF Security Events

Reviews

Start your review of Server-Side Request Forgery Prevention in Java and Spring Boot

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.