Defense in Depth Cybersecurity – Layered Security Strategy

Defense in Depth Cybersecurity – Layered Security Strategy

位教师：Packt - Course Instructors

访问权限由 New York State Department of Labor 提供

10个模块

深入了解一个主题并学习基础知识。

中级等级

推荐体验

2 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

10个模块

深入了解一个主题并学习基础知识。

中级等级

推荐体验

2 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

您将学到什么

Understand the core principles and best practices of Defense in Depth
Adapt security strategies to evolving threats and emerging risks
Develop a layered security approach that aligns with organizational goals

您将获得的技能

要了解的详细信息

可分享的证书

添加到您的领英档案

作业

10 项作业

授课语言：英语（English）

了解顶级公司的员工如何掌握热门技能

了解关于 Coursera for Business 的更多信息

Petrobras, TATA, Danone, Capgemini, P&G 和 L'Oreal 的徽标

该课程共有10个模块

Defense in Depth is a critical cybersecurity strategy used to protect modern systems against complex and evolving threats. This course focuses on building resilient, layered security architectures that reduce risk and strengthen organizational defenses across people, processes, and technology.

Through a structured learning path, this course helps learners understand how to identify threats, assess risks, and apply multiple security controls effectively. You will gain practical skills to design defenses that adapt to real-world attack scenarios and changing threat landscapes. What sets this course apart is its balance of strategic theory and practical application. Concepts such as risk navigation, threat modeling, and attack surface analysis are combined with actionable frameworks used by security professionals. This course is ideal for security professionals, engineers, developers, and managers seeking to improve their cybersecurity posture. Basic familiarity with security concepts is helpful but not mandatory, making it accessible to motivated learners.

In this section, we explore risk management frameworks, asset classification, and threat intelligence analysis to build a proactive security strategy with practical applications.

涵盖的内容

2个视频8篇阅读材料1个作业

2个视频总计2分钟

Course Overview 1分钟
Navigating Risk, Classifying Assets, and Unveiling Threats - Overview Video 1分钟

8篇阅读材料总计75分钟

Introduction 10分钟
Security Policies 10分钟
The Four Pillars of Secure Access Management 10分钟
Risk Analysis 10分钟
Choosing the Right Framework 10分钟
Identifying Threat Actors and Understanding Their Motivations 10分钟
Security through the Ages 10分钟
Security Is Omnipresent 5分钟

1个作业总计10分钟

Foundations of Cybersecurity and Risk Management 10分钟

In this section, we explore defense in depth (DiD) strategies, security domains, and layered controls to enhance system resilience against evolving threats.

涵盖的内容

1个视频9篇阅读材料1个作业

1个视频总计1分钟

Practical Guide to Defense in Depth - Overview Video 1分钟

9篇阅读材料总计100分钟

Introduction 10分钟
Diversification of Defense 10分钟
Deception and Advanced Honeypots 10分钟
Security Domains and Controls 20分钟
Physical Security 10分钟
Cryptography 10分钟
Layering Controls Across Security Domains 10分钟
Threat Actors 10分钟
Continuous Monitoring and Adaptation 10分钟

1个作业总计10分钟

Layered Security Fundamentals 10分钟

In this section, we explore creating a layered security framework using Defense in Depth, emphasizing policy consistency, compliance, and enforcement to enhance organizational resilience against evolving threats.

涵盖的内容

1个视频12篇阅读材料1个作业

1个视频总计1分钟

Building a Framework for Layered Security - Overview Video 1分钟

12篇阅读材料总计115分钟

Introduction 20分钟
Technical Controls 10分钟
Perimeter Defense 10分钟
Data Protection 10分钟
Consistency and Standardization by Security Policies 10分钟
Streamlining Security Practices 5分钟
Compliance and Regulatory Requirements 10分钟
The Health Insurance Portability and Accountability Act (HIPAA) 10分钟
Aligning Security with Regulations 10分钟
Compliance as a Tool, Not a Goal 5分钟
Enforcement and Accountability 10分钟
XFN Collaboration 5分钟

1个作业总计10分钟

Foundations of Layered Security Frameworks 10分钟

In this section, we explore attacker motivations, TTPs, and threat intelligence to identify vulnerabilities and design targeted defensive strategies for proactive risk management.

涵盖的内容

1个视频8篇阅读材料1个作业

1个视频总计1分钟

Understanding the Attacker Mindset - Overview Video 1分钟

8篇阅读材料总计75分钟

Introduction 10分钟
A Hacker's Toolkit and Its Evolution 5分钟
Understanding the Attacker's Business Model 10分钟
Thinking Like an Attacker Identifying Weaknesses 10分钟
Mapping and Hunting Exposed Assets 10分钟
Understanding TTPs 10分钟
Persistence Mechanisms 10分钟
Defensive Countermeasures Turning the Tables 10分钟

1个作业总计10分钟

Mastering the Cybersecurity Adversary Perspective 10分钟

In this section, we examine organizational risks through adversarial simulations, implement Defense in Depth with red/blue teams, and design targeted controls to strengthen security postures.

涵盖的内容

1个视频7篇阅读材料1个作业

1个视频总计1分钟

Uncovering Weak Points through an Adversarial Lens - Overview Video 1分钟

7篇阅读材料总计80分钟

Introduction 10分钟
Adversarial Simulation 10分钟
DiD for Security Organizations with Red/Blue Teams 10分钟
Collaboration for Success 10分钟
Simulating Real-World Attacks 10分钟
Identifying Key Weaknesses 10分钟
Targeted Approach to Controls and Strategies 20分钟

1个作业总计10分钟

Evaluating Security Through an Adversarial Perspective 10分钟

In this section, we analyze common attack vectors, link them to threat actor profiles, and design proactive defensive strategies to enhance security effectiveness and resource efficiency.

涵盖的内容

1个视频4篇阅读材料1个作业

In this section, we explore building a proactive Defense in Depth strategy using zero trust, layered security controls, and SOAR for automated threat response to counter evolving threats.

涵盖的内容

1个视频7篇阅读材料1个作业

1个视频总计1分钟

Building a Proactive Layered Defense Strategy - Overview Video 1分钟

7篇阅读材料总计95分钟

Introduction 20分钟
Identity and Access Management (IAM) 5分钟
Security Orchestration, Automation, and Response (SOAR) 10分钟
Lessons Learned 10分钟
Designing Attacker-Informed Defense 10分钟
Control Choices Through Impact 10分钟
Phase 3 Tweet Propagation 30分钟

1个作业总计10分钟

Proactive Cybersecurity Defense Fundamentals 10分钟

In this section, we explore adaptive Defense-in-Depth (DiD) strategies to counter evolving threats, emphasizing layered security, real-time threat intelligence, and advanced technologies for resilient cyber defenses.

涵盖的内容

1个视频8篇阅读材料1个作业

1个视频总计1分钟

Understanding Emerging Threats and Defense in Depth - Overview Video 1分钟

8篇阅读材料总计115分钟

Introduction 20分钟
AI-Powered Exploits 5分钟
Adapting DiD to New Threats 10分钟
Deception-based Defenses as a Core Layer 10分钟
Smart Incident Response 10分钟
Emerging Tech for the Next Generation 20分钟
Types 20分钟
Security of AI 20分钟

1个作业总计10分钟

Exploring Modern Cybersecurity Challenges 10分钟

In this section, we explore transforming human behavior into a security asset, emphasizing alignment of security with productivity to reduce risks and build resilience.

涵盖的内容

1个视频9篇阅读材料1个作业

1个视频总计1分钟

The Human Factor Security Awareness and Training - Overview Video 1分钟

9篇阅读材料总计120分钟

Introduction 30分钟
Developer Productivity 10分钟
Insider Threats 10分钟
Security and Reliability 10分钟
Understanding "What's in It for Them" 10分钟
Declarative Infrastructure 10分钟
No human on prod 10分钟
Access on Demand 10分钟
Reproducibility 20分钟

1个作业总计10分钟

Security Awareness and Access Control Fundamentals 10分钟

In this section, we explore implementing Defense in Depth (DiD) strategies, operationalizing the Secure Software Development Framework (SSDF), and maintaining continuous security improvements to adapt to evolving threats.