|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/cloud-security-risks-identify-and-protect-against-threats
课程评论：没有评论
课程名称：云安全风险：识别和防护威胁 概述：这是谷歌云网络安全证书的第三门课程。您将深入探讨云计算中的身份管理和访问控制的关键方面，包括最小权限和职责分离等安全原则，以及AAA的关键要素：认证、授权和审计。准备好从中获取新的知识吧！ 课程大纲： 1. **访问控制和身份管理** - 本模块将深入探讨云计算中的身份管理和访问控制的关键方面，涵盖最小权限和职责分离等安全原则，以及AAA的关键要素。您将探索各种访问控制方法、凭证管理和证书处理，这是保护云应用程序所必需的。 2. **威胁和漏洞管理** - 在这个模块中，您将化身为威胁追踪侦探，揭示隐藏的漏洞，精准定位风险，并部署有效的缓解策略。您将掌握资产管理的秘密，学习保护资源的工具和技术，帮助您在云中建立坚不可摧的安全防线。 3. **云原生的短暂性和不可变性原则** - 本模块将探索云原生的短暂性和不可变性原则，关注与这些概念一致的凭证处理。您将发现基础设施配置的自动化及其对安全的影响，包括容器、编排和基础设施即代码（IaC）等关键领域。 4. **数据保护和隐私** - 在本模块中，您将全面了解云中的数据保护和隐私。我们将引导您掌握数据丢失防范、数据发现、数据处理、数据治理和数据分类的基础知识，赋予您理解和实施有效数据治理及访问策略的能力。同时，您将探索数据保留级别的细微差别以及合规控制的应用，以便能够在云安全治理中进行解释和导航。 通过本课程，您将为在云环境中有效识别和防护安全威胁奠定坚实的基础。
Name:Access control and identity management
Description:In this module, you’ll deep dive into the crucial aspects of identity management and access control in cloud computing, covering security principles like least-privilege and separation-of-duties, and the crucial elements of AAA: authentication, authorization, and auditing. You'll explore various access control methods, credential management, and certificate handling, key to securing cloud applications.
Name:Threat and vulnerability management
Description:Get ready for another action-packed adventure! In this module, you'll transform into a threat-hunting detective. Uncover hidden vulnerabilities, pinpoint risks with precision, and deploy cunning mitigation strategies. You'll unlock the secrets of asset management, discovering tools and techniques for safeguarding your resources like a seasoned pro. And get ready to crack the code on secure configuration, building an impenetrable fortress within the cloud.
Name:Cloud Native Principles of Ephemerality and Immutability
Description:Ready to do some exploring? In this module, you'll discover cloud-native principles of ephemerality and immutability, focusing on proper credential handling that aligns with these concepts. You'll discover the automation of infrastructure provisioning and its impact on security, including key areas like containers, orchestration, and Infrastructure-as-Code (IaC).
Name:Data Protection and Privacy
Description:In this module, you'll gain a comprehensive understanding of data protection and privacy in the cloud. We’ll guide you through the essentials of data loss prevention, data discovery, data processing, data treatment, and data classification, empowering you to understand and implement effective data governance and access strategies. You'll also explore the nuances of data retention levels and how compliance controls are applied, so you can explain and navigate governance in cloud security.
Two courses down, three to go – you’re well on your way! This is the third course of the Google Cloud Cybersecurity Certificate. You’ll delve into the key aspects of identity management and access control in cloud computing, including security principles like least-privilege and separation-of-duties, and the crucial elements of AAA: authentication, authorization, and auditing. AAAnd…let’s go to it! ← See what we did there?!
