|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/software-security
课程评论：没有评论
课程名称：软件安全 概述：本课程探索软件安全的基础知识。我们将讨论重要的软件漏洞及其利用方式，例如缓冲区溢出、SQL 注入和会话劫持等攻击，并考虑防御这些攻击的措施，包括先进的测试和程序分析技术。课程强调“内置安全”的理念，关注开发周期的每个阶段可以用来增强软件系统安全性的技术。成功的学习者通常具有技术领域的二年级或三年级本科课程经验，对编程有一定的了解，最好在 C/C++ 及一种其他“管理”编程语言（如 ML 或 Java）方面有些许基础，并对算法有先前接触。对于不熟悉这些语言的学生，可以通过在线网络教程提升其技能。 课程大纲： 1. 低级安全：攻击与利用 2. 防御低级利用：对抗低级攻击 3. 网络安全：攻击与防御 4. 安全软件开发：设计与构建安全软件 5. 程序分析：静态程序分析 6. 渗透测试：渗透与模糊测试
Part: 1
Title:LOW-LEVEL SECURITY
Description:Low-level security: Attacks and exploits
Part: 2
Title:DEFENDING AGAINST LOW-LEVEL EXPLOITS
Description:Defending against low-level exploits
Part: 3
Title:WEB SECURITY
Description:Web security: Attacks and defenses
Part: 4
Title:SECURE SOFTWARE DEVELOPMENT
Description:Designing and Building Secure Software
Part: 5
Title:PROGRAM ANALYSIS
Description:Static Program Analysis
Part: 6
Title:PEN TESTING
Description:Penetration and Fuzz Testing
This course we will explore the foundations of software security. We will consider important software vulnerabilities and attacks that exploit them -- such as buffer overflows, SQL injection, and session hijacking -- and we will consider defenses that prevent or mitigate these attacks, including advanced testing and program analysis techniques. Importantly, we take a "build security in" mentality, considering techniques at each phase of the development cycle that can be used to strengthen the security of software systems. Successful learners in this course typically have completed sophomore/junior-level undergraduate work in a technical field, have some familiarity with programming, ideally in C/C++ and one other "managed" program language (like ML or Java), and have prior exposure to algorithms. Students not familiar with these languages but with others can improve their skills through online web tutorials.
