|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/computer-security-fundamental-concepts-and-practices/
课程评论：没有评论
课程名称：计算机安全：基本概念与实践 课程概述：本课程将全面探讨计算机安全的基础知识与实践，涵盖以下主题： 第一讲：计算机安全概述 - 介绍计算机安全概念 - 资产、漏洞、威胁与攻击 - 安全功能需求 - 基本安全设计原则 - 攻击面 - 计算机安全策略 - 阻止网络犯罪分子/攻击者 第二讲：加密工具 - 对称加密 - 消息认证与哈希函数 - 公钥加密 - 数字签名与信封 - 随机数与伪随机数 - 对称与非对称加密的比较 第三讲：对称加密与消息机密性 - 对称加密原理 - 数据加密标准 - 高级加密标准 - 密码块操作模式 - 密钥分配 第四讲：公钥密码学与消息认证 - 安全哈希函数 - HMAC - RSA公钥加密算法 - Diffie-Hellman密钥交换协议 第五讲：恶意软件 - 恶意软件概述 - 病毒 - 蠕虫 - 机器人 - 根套件 - 移动代码 - 手机蠕虫 - 恶意软件术语 第六讲：服务拒绝攻击 - 服务拒绝攻击概述 - 源地址欺骗 - SYN欺骗 - 洪水攻击 - 分布式拒绝服务(DDoS) - 放大攻击 - DNS放大攻击 - 拒绝服务攻击防御与预防 第七讲：数据库安全 - 关系数据库示例 - 数据库访问控制 - SQL访问控制 - 基于角色的访问控制 - 推理与统计数据库 - 数据库加密 - SQL注入攻击 第八讲：入侵检测 - 入侵者概述 - 入侵者分类 - 入侵示例 - 安全入侵与检测 - 入侵技术 - 入侵检测系统(IDS) 第九讲：可信计算与多级安全 - 计算机安全模型 - Bell-LaPadula (BLP) 模型 - 多级安全(MLS) - 通用标准 第十讲：人力资源安全 - 安全意识、培训与教育 - 政策与雇佣实践 - 电子邮件及互联网使用政策 - 计算机安全事件响应团队 第十一讲：硬件安全 - 硬件攻击概述 - 硬件攻击的目标与类型 - 硬件特洛伊木马与后门 - 硬件后门的预防与检测 - 产品开发过程中的安全 第十二讲：物联网安全 - 物联网时代开始 - 物联网设备的组成 - 物联网参考模型 - 物联网安全框架与挑战 第十三讲：法律与伦理方面 - 网络犯罪与计算机犯罪 - 知识产权 - 隐私与伦理问题 本课程适合希望深入了解计算机安全的学习者。
LECTURE 1: COMPUTER SECURITY OVERVIEW1.1 Computer Security Concepts1.2 Assets, Vulnerabilities, Threats and Attacks1.3 Security Functional Requirements1.4 Fundamental Security Design Principles1.5 Attack Surfaces1.6 Computer Security Strategy1.7 Thwarting Cyber Criminals/ AttackersLECTURE 2: CRYPTOGRAPHIC TOOLS2.1 Symmetric Encryption2.2 Message Authentication and Hash Functions2.3 Public-Key Encryption2.4 Digital Signatures & Envelops2.5 Random and Pseudorandom Numbers2.6 Symmetric vs AsymmetricLECTURE 3: SYMMETRIC ENCRYPTION AND MESSAGE CONFIDENTIALITY3.1 Symmetric Encryption Principles3.2 Data Encryption Standard3.3 Advanced Encryption Standard3.4 Cipher Block Modes of Operation3.5 Key DistributionLECTURE 4: PUBLIC-KEY CRYPTOGRAPHY AND MESSAGE AUTHENTICATION4.1 Secure Hash Functions4.2 HMAC4.3 The RSA Public-Key Encryption Algorithm4.4 Diffie-Hellman Key Exchange ProtocolLECTURE 5 - MALICIOUS SOFTWARE5.1 Malware5.2 Viruses5.3 Worms5.4 Bots5.5 Rootkits5.6 Mobile Code5.7 Mobile Phone Worms5.8 Malware terminologiesLECTURE 6 - DENIAL-OF-SERVICE ATTACKS6.1 Denial of Service Attacks6.2 Source Address Spoofing6.3 SYN Spoofing6.4 Flooding Attacks6.5 DDOS6.6 Amplification Attacks6.7 DNS Amplification Attacks6.8 DOS Attack defenses6.9 Attack PreventionLECTURE 7 - DATABASE SECURITY7.1 Relational Database Example7.2 Database Access Control7.3 SQL Access Controls7.4 Role-Based Access Control7.5 Inference7.6 Statistical Databases (SDB)7.7 Protecting Against Inference7.8 Database Encryption7.9 SQL Injection AttacksLECTURE 8 - INTRUSION DETECTION8.1 Intruders8.2 Classes of intruders8.3 Examples of Intrusion8.4 Security Intrusion & Detection8.5 Intrusion Techniques8.6 Intrusion Detection Systems8.7 IDS Principles8.8 IDS Requirements8.9 Host-Based IDS8.10 Network-Based IDS8.11 Intrusion Detection Exchange Format8.12 HoneypotLECTURE 9 - TRUSTED COMPUTING AND MULTILEVEL SECURITY9.1 Computer Security Models9.2 Bell-LaPadula (BLP) Model9.3 Multilevel Security (MLS)9.4 Common Criteria (CC)LECTURE 10 - HUMAN RESOURCES SECURITY10.1 Security Awareness, Training, and Education10.2 Polices and Employment Practices10.3 E-Mail and Internet Use Policies10.4 Computer Security Incident Response TeamsLECTURE 11 - HARDWARE SECURITY11.1 Introduction11.2 Hardware attacks11.3 Goals of Hardware Attack11.4 Common hardware Attacks11.5 Types of Hardware Attacks11.6 Types of Hardware Attackers11.7 Hardware Trojan11.8 Types of Hardware Backdoors11.9 Hardware backdoors prevention11.10 Hardware backdoor detection11.11 Methods for disabling backdoor triggers11.12 Security during product development11.13 Anti-Tamper Mechanisms11.14 Cryptographic Processors and AlgorithmsLECTURE 12 - IOT SECURITY12.1 The IoT Era Begins12.2 Components of IoT-Enabled Things12.3 IoT Reference model12.4 IoT Security12.5 IoT Security & Privacy Req. defined by ITU-T12.6 An IoT Security Framework12.7 IoT Security Challenges12.8 Internet of Things - Liability12.9 IoT security toolsLECTURE 13 LEGAL AND ETHICAL ASPECTS13.1 Cybercrime and Computer Crime13.2 Intellectual Property13.3 Privacy and Ethical Issues
