|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ccsp-domain-4-cloud-application-secucurity/
课程评论：没有评论
课程名称：CCSP Domain 4 - 云应用安全 课程概述：该课程全面讲解云应用安全领域的关键概念，该领域在2022年8月的考试中占17%。我将引导您了解所需的所有概念，并建议您掌握所需的知识水平。在课程中，我们将提供超过两个半小时的视频内容以及基于我的书籍《云守护者》的课程笔记。 我们将探讨软件开发生命周期（SDLC），包括各个阶段和通过这些阶段的各种方法论。了解云特有的应用风险至关重要，我们将讨论SQL注入、缓冲区溢出等威胁。了解这些威胁，包括Pandemic 11、OWASP和SANS前20名的内容，将使您更好地为考试做好准备。 威胁建模技术也是关键内容之一，我们将研究STRIDE、DREAD等方法。应用测试非常重要，当前这是最常见的攻击点，我们将讨论封闭盒测试、开放盒测试以及动态应用安全测试（DAST）、静态应用安全测试（SAST）和交互式应用安全测试（IAST）。 此外， निर्माण软件的供应链也需要谨慎对待。最近的攻击事件告诉我们，供应链可能受到攻击。最后，我们将讨论成熟度模型和数据权管理/信息权管理以及成熟度模型的相关内容。
In this course we walk through all of the critical concepts within the Cloud Application Security domain. This domain is 17% of the test as of August 2022. I will guide you through all of the concepts that you need to know and advise you on the level of knowledge that you need to get comfortable with.There are over two and a half hours of video content plus course notes based on information from my book: Cloud Guardians.We will explore the software development lifecycle (SDLC), to include the phases and the methodologies for moving through those phases.It is important to know the risks to applications including any that are cloud specific. We will talk about SQL injections and buffer overflows and the like. The more that you know of these threats from the Pandemic 11 to OWASP and the SANS Top 20 the better prepared you will be for the exam.Threat modeling techniques are also key. We will look at STRIDE and DREAD and a couple of others.Testing application is very critical. This is our most common attack point these days. We will talk about closed box and open box testing as well as DAST, SAST and IAST.There is also a great need to take care with the supply chain involved in creating software today. We have learned from recent attacks that the supply chain can be compromised.We finish with discussion about maturity models and data rights management/information rights management and maturity models.
