Software Development Security

Loading...

Do curso por University System of Georgia

Segurança cibernética e seus dez domínios de atuação

1002 ratings

University System of Georgia

Segurança cibernética e seus dez domínios de atuação

1002 ratings

Este curso é para introduzir alunos, profissionais e a comunidade ao excitante campo da segurnaça cibernética. Durante o curso, os participantes irão se engajar nas discussões da comunidade e através da interação online. Os participantes irão adqruirir conhecimento e entendimento da segurança cibernética e seus dez domínios. Eles irão se engajar com vídeos de produção excepcional, ouvir conselhos de especialistas do campo, participar em avaliações de conhecimento, praticar a avaliação da consciência do seu ambiente, e ganhar acesso a materiais que abordam governança e gestão de riscos, adequação, continuidade de negócio e recuperação de desastres, criptografia, segurança no desenvolvimento de software, controle de acesso, segurança de rede, arquitetura de segurança, operações de segurança e segurança física e ambiental. O conhecimento será avaliado usando estratégias alinhadas ao conhecimento e entendimento. Você não precisa de experiência prévia em segurança de TI para se sair bem nesse curso. Tudo que você precisa é a vontade de aprender. Nós encaminharemos você a recursos abertos e gratuitos para ajudá-la. Ao final desse curso você terá a opção de se inscrever para obter créditos no nível de graduação na Universidade Estadual Kennesaw (dependendo da adimissão à universidade como aluno regular ou não). Mais informações estão disponíveis no módulo final "Receba créditos para o curso na Universidade Estadual Kennesaw".

Na lição

Introduction to Security, Access Control, and Software Development Security

In this module we cover some of the fundamentals of security that will assist you throughout the course. We will then introduce you to two domains of cyber security: access control and software development security. Focus will be on areas such as confidentiality, integrity, and availability, as well secure software development techniques.

Introduction to Security3:11

Access Control2:55

Software Development Security3:57

Conheça os instrutores

Dr. Humayun Zafar
Associate Professor of Information Security and Assurance
Information Systems

Hi. I’m Chris Lee, a enterprise mobility support engineer at SAP, and I’m here today

to talk to you about Software Development Security

The system/software development life cycle has been around for years. What we now know

is that it is important to embed software security principles throughout the software

development lifecycle. This is easier said than done. Software development involves numerous

stakeholders (e.g. top management, clients, managers etc.). Good thing is that (ISC)2

has come up with ten best practices for secure software development

The ten best practices are: 1.Protect the brand your customers trust.

Attackers will not just disrupt business operations, but may also impact consumer confidence.

2.Know your business and support it with secure solutions. A security professional must not

only have a strong background in technology, but must also have a through understanding

of the business when it comes to creating secure solutions.

3.Understand the technology of the software. A lack of understanding of the technology

used to build or buy software can lead to insecure implementations of the software.

4.Ensure compliance to governance, regulations, and privacy. A software security professional

needs to be well versed in meeting regulatory and privacy requirements

5.Know the basic components of software security. These basic components are: protection from

disclosure (which is confidentiality); protection from alteration (integrity); protection from

destruction (which is availability); who is making the request (which is authentication);

what rights and privileges does the requestor have (which authorization); the ability to

build historical evidence (which is auditing); and the management of configuration, sessions,

and exceptions 6.Ensure the protection of sensitive information.

It’s not just important to protect the brand customers trust, but it is vital that any

sensitive information be protected as well. 7.Design software with secure features. When

a software developer focuses only on finding security issues in code, he or she runs the

risk of missing out on vulnerabilities such as business logic flaws, which can’t be

detected in code. 8.Develop software with secure features. It

is imperative that secure features are not ignored when design artifacts are converted

into syntax constructs. 9.Deploy software with secure features. A

development team needs to ensure that the development and test environments properly

simulate the production environment. 10.Educate yourself and others on how to build

secure software. It is important to create a culture that factors in software security

from the very beginning by default. The National Institute of Standards and Technology (NIST)

states that education should cause a change in attitudes, which in turn will change the

organizational culture.

Explore nosso catálogo

Registre-se gratuitamente e obtenha recomendações, atualizações e ofertas personalizadas.

O Coursera proporciona acesso universal à melhor educação do mundo fazendo parcerias com as melhores universidades e organizações para oferecer cursos on-line.

© 2018 Coursera Inc. Todos os direitos reservados.

Baixar na App Store

Baixar no Google Play