Cybersecurity Architecture

所在平台: Coursera

课程主页: https://www.coursera.org/learn/cybersecurity-architecture

课程评论：没有评论

第一个写评论        关注课程

课程简介

课程名称：网络安全架构 概述：在数字化的世界中，数据推动着全球经济，几乎所有的网络攻击都旨在窃取敏感信息或劫持数据。根据IBM近期的研究，“数据泄露的全球平均成本为445万美元，较三年前增长了15%”。如果您正在开始网络安全职业生涯或对网络安全如何运作感到好奇，请加入我们这门关于网络安全架构的五个模块课程。您将向来自IBM的杰出专家学习。 课程大纲： 1. **网络安全架构概述** 在这一模块中，您将介绍网络安全的基本原则，包括深度防御、最小权限、分离职责、安全设计、简单化原则（KISS）等。同时，您将了解不当的“安全隐蔽”做法，它可能导致网络攻击。接着，您将认识到与保密性、完整性和可用性相关的重要性和关键概念，简称CIA三角理论。最后，您将熟悉角色及其安全管理。 2. **访问管理与终端安全** 本模块介绍身份与访问管理（IAM）及终端。IAM是安全领域之一，被称为新边界。您将学习LDAP和IAM的“四个A”（管理、授权、认证和审计）。在简要讨论特权访问管理（PAM）后，您将了解多因素认证（MFA）和单点登录（SSO）的概念。同时，您将学习到终端这一关键安全领域的定义和终端管理系统的作用，以帮助控制终端设备。 3. **网络、应用和数据安全** 在这一模块中，您将了解网络、安全和数据领域的安全性。在网络安全领域，您将深入了解防火墙概念，包括数据包过滤、状态检测和代理等。还将介绍与分段、虚拟专用网络（VPN）和安全访问服务边缘（SASE）相关的安全概念。应用安全领域将使您熟悉安全漏洞产生的阶段及安全编码的最佳实践，同时介绍漏洞测试的概念。最后，数据安全的相关概念将涵盖数据治理、发现、合规、检测和响应。 4. **检测与响应** 本模块将教授如何检测和响应网络攻击。您将了解到安全是预防、检测和响应的总和。通过使用安全信息和事件管理（SIEM）系统或扩展检测响应（XDR）系统的检测技术，掌握监控、分析、报告和威胁狩猎等任务。您还将获得关于SIEM和XDR工作机制的概述，并学习关于联合搜索的知识。此模块还将讨论如何响应网络攻击，您将熟悉SOAR系统，并了解自动化和编排的不同。最后，将介绍违约通知。 5. **最终项目、考试及课程总结** 在此模块中，您将完成一个最终项目，展示您在设计安全网络架构方面的能力。接下来，案例研究将帮助您理解IBM的不同安全工具。最后，最终考试将测试您对课程内容的知识，包括网络安全基础和安全领域。 这个课程为希望深入学习网络安全的人员提供了全面的知识与实践机会。

课程大纲

Name:Cybersecurity Architecture Overview

Description:In this module, you will be introduced to fundamental principles of cybersecurity including defense in depth, least privilege, separation of duties, security by design, Keep It Simple, Stupid (KISS). You will also be introduced to bad practice Security by Obscurity that can lead to cyberattacks. Next, you will be able to recognize the importance and key concepts related to Confidentiality, Integrity, and Availability, or the CIA Triad. Finally, you will become familiar with roles and how to manage the role security.

Name:Access Management and Endpoint Security

Description:This module introduces Identity and access management (IAM) and endpoints. IAM is one of the security domains and is referred to as the new perimeter. You will learn about the LDAP and the 4 A’s of IAM including administration, authorization, authentication, and audits. After a brief discussion on Privileged access management (PAM), you will be introduced to the concepts of multifactor authentication (MFA) and single sign on (SSO). You will also learn about endpoints, which is another key security domain. After learning the definition of an endpoint, you will be introduced to endpoint management systems, which help control the endpoints.

Name:Network, Application, and Data Security

Description:In this module, you will be introduced to security in the network, application and data domains. As part of the network security domain, you will gain insight into firewall concepts, such as packet filter, stateful packet inspection, and proxy. You will also be introduced to security concepts associated with segments and VPNs, and SASE. Moving to the Application security domain, you will get familiar with the phases when security vulnerabilities creep in along with best practices for secure coding along with introduction of vulnerability testing. The concept of DevSecOps, Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) will also be introduced. This module will conclude with concepts associated with data security including governance, discovery, compliance, detection, and response.

Name:Detection and Response

Description:In this module, you will learn about detecting cyberattacks and responding to them. This module will introduce you to security being the sum of prevention, detection, and response. You will be introduced to detection using the security information and event management (SIEM) system or extended detection response (XDR) system detection techniques to perform tasks such as monitoring, analyzing, reporting, and threat hunting. You will also get an overview of the SIEM process followed by the XDR process and how SIEM and XDR work together. Further, you will be introduced to federated search. This module will also cover how to respond to cyberattacks. You will become familiar with the SOAR system and also understand how automation and orchestration differ. Finally, you will be introduced to breach notifications.

Name:Final Project, Exam, and Course Wrap-Up

Description:In this module, you will complete a final project where you will have an opportunity to demonstrate your proficiency in designing a secure network architecture. Next, a case study will help you understand the different security tools from IBM. Finally, the final exam will test your knowledge of the course’s content including cybersecurity fundamentals and security domains.

课程评论(0条)