|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/introduction-to-the-owasp-top-10-2021/
课程评论：没有评论
**课程名称：** 破解代码：精通 OWASP Top 10 (2021-2025 版) **课程概述：** 本课程是一门面向初学者的 OWASP Top 10 入门课程，基于 2021 年更新的版本。课程没有任何技术前提，适合所有人学习，包括风险经理、审计师、网络安全专业人士、软件开发者，或任何对应用程序安全感兴趣并希望了解 OWASP Top 10 的人士。 **课程内容：** * **OWASP 基金会介绍：** 了解 OWASP 基金会及其开源社区的参与方式。 * **OWASP Top 10 风险详解：** 学习 2021 年 OWASP Top 10 的主要风险，以及该列表的更新机制。 * **关键信息安全概念：** 深入理解每个 OWASP Top 10 风险相关的核心信息安全概念。 * **风险定义（通俗易懂）：** 以通俗易懂的语言解释每个风险，确保学员真正理解。 * **风险产生的挑战：** 探讨导致每个风险的主要挑战，以及开发者和其他相关人员面临的困难。 * **代码示例（伪代码）：** 通过良好的和不良的代码示例，直观展示风险的体现。 * **防护最佳实践：** 学习如何避免每个风险的发生，以帮助个人和团队提高安全性。 **目标学员：** 任何希望了解应用程序安全和 OWASP Top 10 的人士，无论其技术背景如何。
Welcome to this beginner course on the OWASP Top 10, as it was last updated in 2021 almost beginning of 2022. This course has no technical prerequisites, it is truly meant for everyone. Whether you are a risk manager, an auditor, a cybersecurity professional, or maybe you are a software developer or simply curious on application security and looking for an introduction to the OWASP Top 10: This course is for you!In this course you will learn a little bit about the OWASP Foundation and how you can be part of this opensource community. We are going to learn what are the OWASP Top 10 risks of 2021 and how this list of risks gets periodically updated.For each of the OWASP Top 10 risks, we are going to look at the key information security concepts, so that you better understand the definition of each risk. Then we are going to - together - define each risk - and we are going to do this in layman's terms, so that you really understand each risk. We are also going to look at the main challenges that developers and others face that cause each risk. Finally, we are going to give examples of good and bad code using pseudocode and we are going to conclude with some of the best protection practices to help you and your team avoid each risk from materializing.
