|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/essential-cybersecurity-for-devops-cloud-and-devs/
课程评论：没有评论
**课程名称：** DevOps,云及开发人员必备网络安全 **课程概述：** 本课程旨在为DevOps、云开发人员和普通开发者提供网络安全的基础知识。在全球化互联日益重要的今天，网络安全威胁层出不穷，严重威胁着敏感数据、关键基础设施和全球经济。本课程将系统性地介绍关键安全原则、攻击方式和防御策略。 **课程内容摘要：** **第一章：加密学** 作为安全的两大支柱之一，加密学在本章将进行深入探讨，涵盖以下主题： * 安全态势概览 * 安全的两大支柱：加密学与 CPU 保护环 * CPU 保护环 * 哈希算法 * OpenSSL * 对称加密 * 非对称加密 * 数字签名 * Diffie-Hellman 密钥交换 * 传输层安全 (TLS) * 证书颁发机构 (CA) * 服务器名称指示 (SNI) * 代理 (Proxy) * 代码签名 * 身份验证 (Authentication) * 授权 (Authorization) * SAML, OIDC & OAuth **第二章：CPU 保护环与系统安全** 本章将深入讲解安全另一大支柱——CPU 保护环，并详细介绍： * CPU 保护环 * 代码权限 * 内存分段 * 内存分页 * 系统调用 * 内核模式与用户模式的重要性 * 权限提升 (Privilege Escalation) **第三章：网络安全漏洞、攻击与恶意软件** 本章将涵盖各种常见的网络安全威胁，包括： * **漏洞与攻击实例：** * 代码签名漏洞 * “ILOVEYOU”蠕虫 * Stuxnet * HeartBleed * Spectre 和 Meltdown * Wannacry 和 Log4Shell * BytHack * **各类网络攻击类型：** * 网络钓鱼 (Phishing) * SQL 注入 (SQL Injection) * 拒绝服务攻击 (DoS) * DNS 隧道 (DNS Tunnelling) * 密码攻击 (Password Attacks) * DNS 欺骗 (DNS Spoofing) * 僵尸网络 (BotNets) * 加密劫持 (Cryptojacking) * 跨站脚本攻击 (XSS Attack) * 代码注入 (Code Injection) * 跨站伪造 (Cross-site Injection) * **个人与企业系统及账户保护：** * 保护个人和企业系统及账户的策略和方法。 本课程旨在帮助学员构建坚实的安全基础，应对日益复杂的网络威胁。
In today's interconnected world, cybersecurity is paramount as digital threats constantly evolve, jeopardizing sensitive data, critical infrastructure, and global economies. Our comprehensive course will equip you with a foundational understanding of various essential security principles, attack vectors and defensive strategies.In chapter 1 we will be discussing about Cryptography, one of the two pillars of security. We will be discussing in detailed about the following topics.Security LandscapeTwo Pillars of security - Cryptography and Protection Rings of CPUHashing AlgorithmOpenSSLSymmetric EncryptionAsymmetric EncryptionDigital SignaturesDiffie-Hellman Key ExchangeTransport Layer Security (TLS)Certificate Authority (CA)SNIProxyCode SigningAuthenticationAuthorizationSAML, OIDC & OAuthIn chapter 2 we will be dealing with second pillar of security, Protection Rings of CPU. We will be discussing in detailed about:Protection Rings of CPUPrivilege of CodeSegmentationPagingSystem CallsImportance of kernel mode and User modePrivilege EscalationIn chapter 3 we will be covering,Various Vulnerabilities, Cyber Attacks & MalwareCut Code Signing and I Love You WormStuxnetHeartBleedSpectre and MeltdownWannacry and Log4ShellBy Bit HackTypes of Cyber Attacks like Phishing, SQL Injection, DOS, DNS Tunnelling, Password Attacks, DNS Spoofing, BotNets, Cryptojacking, XSS Attack, Code Injection, Cross site Injection.Protecting Personal and Corporate systems and accounts
