|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/fake-security-myths/
课程评论：没有评论
Coursera课程《假性安全：人们相信的应用安全误区》 本课程旨在揭露一系列关于应用安全的关键误区，这些误区往往源于项目范围、预算和时间表的压力，并导致“假性安全”的出现，使应用程序容易受到攻击。 课程强调，编写代码相对容易，但编写高质量代码则十分困难；同样，添加安全功能看似简单，但要找到易用性、有效性和可维护性之间的平衡却极具挑战。课程将深入探讨如何在开发和安全之间找到最佳平衡点。 课程将以简短精炼的形式，帮助学员开始评估自身的应用程序和系统。尽管许多话题可以深入研究，但本课程将保持较高层次的探讨，以便覆盖更广泛的受众，包括管理者、项目负责人、产品负责人以及各种技能水平的开发者。 主要内容包括： * **OWASP Top Ten 列表的目的** * **通过隐匿来规避安全（Security Through Obscurity）** * **云环境中的安全责任** * **API 安全** * **以及更多……** 本课程适合管理者、项目负责人、产品负责人以及所有技能水平的开发者，共同破除那些不应再被相信的安全误区。
When facing the pressures of scope, budget, and schedule...some application security myths have developed.There are few things we know about application development and producing system that are secure in the way that they are deployed, operated, and maintained.We know that: Writing code is easy...but writing good code is hardWe know that: Adding security is easy...but finding the right balance between usability, effectiveness, and maintainability is hardWe are always trying to find that balance in development and security...This course is an examination of a just a few myths that result in Fake Security. They contribute to a false sense of security and can sometimes leave your application easily vulnerable to attack.We've tried to keep the lecture short and concise, giving you enough information to start evaluating your own applications and systems. While the topics covered here can get really deep...very quickly, we've tried to keep it at a high level. This with the hopes that we can reach a broad audience and bring value to managers, project leaders, and developers of all skill levels.We'll cover topics like:The Purpose of the OWASP Top Ten ListAvoiding Security Through ObscuritySecurity Responsibilities in the CloudAPI SecurityAnd more...Who is this course for:managersproject leadersproduct ownersdevelopers of all skill levelsLet's get started debunking a few myths that we shouldn't believe...
