This course will help you build a foundation of some of the fundamental concepts in secure programming. We will learn about the concepts of threat modeling and cryptography and you'll be able to start to create threat models, and think critically about the threat models created by other people. We'll learn the basics of applying cryptography, such as encryption and secure hashing. We'll learn how attackers can exploit application vulnerabilities through the improper handling user-controlled data. We'll gain a fundamental understanding of injection problems in web applications, including the three most common types of injection problems: SQL injection, cross-site scripting, and command injection.
Este curso faz parte do Programa de cursos integrados Secure Coding Practices
10.094 já se inscreveram
oferecido por
Programa de cursos integrados Secure Coding PracticesUniversidade da Califórnia, DavisInformações sobre o curso
8.369 visualizações recentes
Prazos flexíveis
Redefinir os prazos de acordo com sua programação.
Certificados compartilháveis
Tenha o certificado após a conclusão
100% on-line
Comece imediatamente e aprenda em seu próprio cronograma.
Curso 2 de 4 no
Nível intermediário
1-2 years of experience with some form of computer programming language like C/C++ or Java.
Aprox. 13 horas para completar
Inglês
Legendas: Árabe, Francês, Portuguese (European), Italiano, Vietnamita, Alemão, Russo, Inglês, Espanhol
Sua empresa se beneficiaria do treinamento dos funcionários em habilidades sob demanda?
Experimente o Coursera for BusinessHabilidades que você terá
- Cryptography
- Authentication Methods
- secure programming
Prazos flexíveis
Redefinir os prazos de acordo com sua programação.
Certificados compartilháveis
Tenha o certificado após a conclusão
100% on-line
Comece imediatamente e aprenda em seu próprio cronograma.
Curso 2 de 4 no
Nível intermediário
1-2 years of experience with some form of computer programming language like C/C++ or Java.
Aprox. 13 horas para completar
Inglês
Legendas: Árabe, Francês, Portuguese (European), Italiano, Vietnamita, Alemão, Russo, Inglês, Espanhol
Sua empresa se beneficiaria do treinamento dos funcionários em habilidades sob demanda?
Experimente o Coursera for Business
oferecido por
Universidade da Califórnia, Davis
UC Davis, one of the nation’s top-ranked research universities, is a global leader in agriculture, veterinary medicine, sustainability, environmental and biological sciences, and technology. With four colleges and six professional schools, UC Davis and its students and alumni are known for their academic excellence, meaningful public service and profound international impact.
Programa - O que você aprenderá com este curso
4 horas para concluir
Foundational Topics in Secure Programming
In this module, you will gain exposure to the ideas of threat modeling and applied cryptography. By the end of the module, you will be able to start to create threat models, and think critically about the threat models created by other people. You will be able to apply the STRIDE Method to your threat model and distinguish the trust boundaries in a given system. You will also gain a basic understanding of applied cryptography, such as encryption and secure hashing.
4 horas para concluir
14 vídeos (Total 83 mín.), 3 leituras, 2 testes
3 horas para concluir
Injection Problems
By the end of this module, you will have a fundamental understanding of injection problems in web applications. You'll be able to discuss and describe the three most common types of injection problems: SQL injection, cross-site scripting, and command injection. In order to drive home these concepts, you will be able to work on exploiting a SQL injection vulnerability in the WebGoat application. You'll be able to formulate plans to mitigate injection problems in your applications.
3 horas para concluir
17 vídeos (Total 87 mín.), 1 leitura, 1 teste
4 horas para concluir
Problems Arising From Broken Authentication
By the end of this module, you will be able to evaluate a system to determine if it follows the generally prescribed secure methods for authentication and session management in web applications. You'll be able to distinguish the relationship between authentication, session management, and access control. You will also be able to exploit WebGoat's authentication and session management vulnerability. As well as be able to evaluate a system to determine if it performs sufficient security logging such that non-repudiation is enforced. This will help drive the concepts that you will learn in this module.
4 horas para concluir
11 vídeos (Total 71 mín.), 1 leitura, 1 teste
3 horas para concluir
Sensitive Data Exposure Problems
By the end of this module, you will understand how to effectively store password-related information, and NOT to store the actual plaintext passwords. You will also have a hands on coding assignment that will help you to better understand the mechanisms for effectively storing password-related information. Ready?
3 horas para concluir
9 vídeos (Total 36 mín.), 1 leitura, 2 testes
Avaliações
- 5 stars74%
- 4 stars20%
- 3 stars4,66%
- 1 star1,33%
Principais avaliações do IDENTIFYING SECURITY VULNERABILITIES
por JY6 de set de 2021
It's a good course for who is looking to learn about secure code
por DJ20 de mai de 2020
KINDLY PROVIDE HANDS ON .THERE WAS NO HANDS ON ALL THEORY NO T MUCH USE IF STUDENTS GET ZERO PRACTICAL
por MM24 de jul de 2020
Coursera site is very use full for learning,knowledge sharing, quality checking and improve skills
por AN14 de mai de 2020
Excellent course material and equally good delivery.
Sobre Programa de cursos integrados Secure Coding Practices
This Specialization is intended for software developers of any level who are not yet fluent with secure coding and programming techniques.Through four courses, you will cover the principles of secure coding, concepts of threat modeling and cryptography and exploit vulnerabilities in both C/C++ and Java languages, which will prepare you to think like a hacker and protect your organizations information. The courses provide ample practice activities including exploiting WebGoat, an OWASP project designed to teach penetration testing.
Perguntas Frequentes – FAQ
Quando terei acesso às palestras e às tarefas?
O que recebo ao me inscrever nesta Especialização?
Existe algum auxílio financeiro disponível?
Mais dúvidas? Visite o Central de Ajuda ao estudante.
