Security-Driven Software Development

Security-Driven Software Development

位教师：Packt - Course Instructors

访问权限由 New York State Department of Labor 提供

14个模块

深入了解一个主题并学习基础知识。

中级等级

推荐体验

1 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

14个模块

深入了解一个主题并学习基础知识。

中级等级

推荐体验

1 周完成

在 10 小时一周

灵活的计划

自行安排学习进度

您将学到什么

Identify non-functional requirements essential for software security, performance, and reliability
Model vulnerabilities in software design and analysis
Analyze and mitigate security threats specific to web applications

您将获得的技能

Secure Coding
Cybersecurity
Cyber Security Assessment
Open Web Application Security Project (OWASP)
Software Development
Unified Modeling Language
Single Sign-On (SSO)
Data Validation
Authentications
Cyber Security Strategy
Security Software
Development Testing
Software Development Life Cycle
Authorization (Computing)
Role-Based Access Control (RBAC)
OAuth
Vulnerability Assessments
Application Security
Threat Modeling
技能部分已折叠。显示 8 项技能，共 19 项。

要了解的详细信息

可分享的证书

添加到您的领英档案

作业

14 项作业

授课语言：英语（English）

了解顶级公司的员工如何掌握热门技能

了解关于 Coursera for Business 的更多信息

Petrobras, TATA, Danone, Capgemini, P&G 和 L'Oreal 的徽标

该课程共有14个模块

This course empowers software developers to integrate security throughout the software development lifecycle (SDLC). In today’s rapidly evolving threat landscape, securing applications from the outset is crucial. You'll learn to identify and mitigate common security risks such as buffer overflows, SQL injection, and session hijacking. By emphasizing practical examples, this course bridges theory and real-world applications to build a “build security in” mindset.

Throughout this course, you will develop the skills necessary to design secure applications by analyzing vulnerabilities and applying mitigation techniques at every stage of development. Hands-on exercises and code snippets provide valuable tools to tackle progressively advanced security challenges. Unlike other courses that focus only on theory, this course blends conceptual explanations with real-world scenarios, ensuring you can apply your learning immediately. By the end, you’ll be equipped to tackle security challenges in your own software projects. Software developers and web developers who wish to enhance their skills in secure application development will benefit from this course. A basic understanding of software development and security principles is recommended to get the most out of this content.

In this section, we explore security principles, OWASP, NIST, and software development lifecycles.

涵盖的内容

2个视频1篇阅读材料1个作业

In this section, we explore designing a secure functional model by analyzing requirements, non-functional security needs, and creating use cases for secure system behavior.

涵盖的内容

1个视频1篇阅读材料1个作业

In this section, we explore secure object model design, focusing on identifying objects, creating class diagrams, and defining invariants for secure behavior.

涵盖的内容

1个视频1篇阅读材料1个作业

In this section, we examine object behavior, interactions, and constraints to design secure dynamic models, enhancing system security and reliability through UML diagrams and practical applications.

涵盖的内容

1个视频3篇阅读材料1个作业

In this section, we explore designing secure system models by implementing partitions, modeling interactions, and using UML diagrams to visualize system architecture and enhance security.

涵盖的内容

1个视频1篇阅读材料1个作业

In this section, we explore threat modeling techniques like STRIDE, DREAD, and attack trees to identify and mitigate security risks in software systems through structured analysis.

涵盖的内容

1个视频2篇阅读材料1个作业

In this section, we explore authentication and authorization, focusing on their roles in securing systems. Key concepts include SSO, OAuth, and enterprise security models, with practical implementation insights.

涵盖的内容

1个视频3篇阅读材料1个作业

In this section, we explore input validation and sanitization to secure applications and prevent vulnerabilities.

涵盖的内容

1个视频3篇阅读材料1个作业

In this section, we examine standard web application vulnerabilities, including injection attacks, broken authentication, and request forgery, with practical strategies for mitigation and secure development practices.