|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/proactive-computer-security
课程评论：没有评论
课程名称：主动计算机安全 课程概述：在这门课程中，学员将学习如何主动测试自己设置的计算机安全措施是否有效。这是实用计算机安全专业化的第四门也是最后一门课程。在第一周，学员将讨论威慑措施的基础知识，并学习如何"欺骗"攻击者，使其误以为获取了大量数据，从而保护实际系统。第二周将深入了解渗透测试的方法论。第三周，学员将能够理解并将所学应用于自己的系统，以测试其安全性。第四周，将制定适用于个人系统的安全方法论规划。最后在第五周，学员将完成一个项目，以在安全环境中测试其技能。 课程大纲： 1. **信息分享与威胁情报**：介绍信息共享的工具，帮助组织收集保护自身的信息。 2. **渗透测试方法论**：强调遵循渗透测试方法论的重要性，以避免测试过程中的假阳性或假阴性结果。 3. **常见渗透测试工具**：介绍一些渗透测试中常用的工具，这些工具用于获取信息、查找漏洞和攻破系统。 4. **主动计算机安全管理**：讨论主动安全管理中其他重要问题，包括法律问题和有效的规划。 5. **利用OWASP前20控制措施**：作为课程项目，学员的目标是在测试系统中获取或损害数据。 通过这门课程，学员将能更加自信地评估和提升个人或组织的计算机安全防护能力。
Name:Information Sharing and Threat Intelligence
Description:This module covers information sharing. Information sharing is an important tool to help organizations gather information from others so they can protect themselves.
Name:Penetration Testing - Methodology
Description:This module will cover the pen testing methodology. Not following a pen testing methodology may lead to false positives or worse, false negatives in a testing scenario.
Name:Common Pen Testing Tools
Description:This module will cover some of the tools used in the penetration testing methodology. These are just common tools used to gain information, find exploits and compromise systems. There are many more tools out there, but these are the most commonly used.
Name:Proactive computer security management
Description:This module will cover some of the other issues and concerns for those interested in proactive security. Legal issues are important for any level of management and administration to be concerned with. Planning goes a long way toward effective proactive computer security.
Name:Exploiting OWASP Top 20 Controls
Description:This is the course project. The goal is for you to compromise or gain data from a test system.
I’ve heard this before – “I’m not sure my computer security practices are working”. I reply “Have you tested them?” This course is the fourth and final course in the Practical Computer Security specialization. In this course, you’ll learn how to proactively test what you have put in place to protect your data. In the first week you’ll be able to discuss the basics of deterrents and how to “trick” attackers into believing they’ve hit a goldmine of data away from your real systems. In week 2, you’ll be able to understand and discuss the steps of penetration testing methodology. In week 3, you will be able to understand and apply what you have learned on your own systems to test whether your systems are secure or not. In week 4, we’ll discuss planning for your own methodology that you can apply to your own systems. And finally in week 5, we’ll finish up with a project that will allow you to test your skills in a safe environment.
