The Ultimate Software Development Security Course:All In One

欢迎来到本课程。如今，许多安全工作都希望通过防火墙、入侵检测系统 (IDS)、内容过滤、反恶意软件、漏洞扫描程序等控制来解决安全问题。这种对一长串安全技术的依赖主要是因为我们的软件包含许多漏洞。我们的环境通常被称为外部坚硬而松脆，内部柔软而耐嚼的环境。这意味着我们的外围安全性得到加强和稳固，但一旦获得访问权限，我们的内部环境和软件就很容易被利用。软件控件有多种形式，并且有许多不同的目标。它们可以控制输入、加密、逻辑处理、数字运算方法、进程间通信、访问、输出、以及与其他软件的交互。软件控制的开发应考虑到潜在风险，并且应在不同的开发阶段调用多种类型的威胁模型和风险分析。目标是减少漏洞和系统受损的可能性。控制可以是预防性的、检测性的或纠正性的。

虽然安全控制在本质上可以是管理和物理的，但软件中使用的控制通常在本质上更具技术性。安全性应该与产品的核心交织在一起，并在必要的层面提供保护。这是一种比尝试开发可能会减少整体功能并在必须将软件集成到生产环境中时留下安全漏洞的前端或包装器更好的方法。软件控制的开发应考虑到潜在风险，并且应在不同的开发阶段调用多种类型的威胁模型和风险分析。目标是减少漏洞和系统受损的可能性。控制可以是预防性的、检测性的或纠正性的。虽然安全控制在本质上可以是管理和物理的，但软件中使用的控制通常在本质上更具技术性。安全性应该与产品的核心交织在一起，并在必要的层面提供保护。

Learn and understand development of software systems and the application of security principles to the acquisition.

Published 06/2022
MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 24 lectures (2h 17m) | Size: 1 GB

What you’ll learn
Software development life cycles
Secure software development approaches
Change control and configuration management
Security of code repositories
Database concepts and security issues
Malware types and attacks

Requirements
Access to a computer with an internet connection

Description
Welcome to this course. Today, many security efforts look to solve security problems through controls such as firewalls, intrusion detection systems (IDSs), content filtering, antimalware software, vulnerability scanners, and much more. This reliance on a long laundry list of security technologies occurs mainly because our software contains many vulnerabilities. Our environments are commonly referred to as hard and crunchy on the outside and soft and chewy on the inside. This means our perimeter security is fortified and solid, but our internal environment and software are easy to exploit once access has been obtained. Software controls come in various flavors and have many different goals. They can control input, encryption, logic processing, number-crunching methods, interprocess communication, access, output, and interfacing with other software. Software controls should be developed with potential risks in mind, and many types of threat models and risk analyses should be invoked at different stages of development. The goals are to reduce vulnerabilities and the possibility of system compromise. The controls can be preventive, detective, or corrective. While security controls can be administrative and physical in nature, the controls used within software are usually more technical in nature. Security should be interwoven into the core of a product and provide protection at the necessary layers. This is a better approach than trying to develop a front end or wrapper that may reduce the overall functionality and leave security holes when the software has to be integrated into a production environment.

In this course we will cover the complex world of secure software development and the bad things that can happen when security is not interwoven into products properly. You will learn

Software development life cycles

Secure software development approaches

Change control and configuration management

Security of code repositories

Database concepts and security issues

Malware types and attacks

Who this course is for
Cybersecurity professionals
Software Developers
Programmers
Anyone interested in cybersecurity