|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/practical-secure-programming-in-solidity/
课程评论：没有评论
课程名称：Solidity 实用安全编程 课程概述：Solidity 是一种专门为以太坊及类似区块链设计的编程语言，旨在实现智能合约的功能。以太坊是一个全球计算平台，允许任何人、任何地方以任何理由使用分布式可存活程序——智能合约。智能合约可以用来桥接不同的区块链系统，完成货物运输与交付过程，并在特定任务的认证完成后支付供应商。智能合约正逐渐成为常规商业流程，消除中介，实现全球价值的顺畅转移。然而，由于 Solidity 编码实践中的错误，每年有数十亿美元因为智能合约被黑客攻击而损失。 本课程首先介绍操作符和基础的 Solidity 结构，然后通过实例深入探讨可用于编写更安全智能合约的安全编码实践。我们将回顾一些最常见的安全问题，例如重入攻击、溢出和下溢、外部调用以及智能合约流控制被劫持的其他情况。最后，我们还会讲解 linting、质量保证和 DevOps 工具，这些工具可以帮助识别代码中的问题，并指导如何使用这些工具修复安全问题。此外，我们还会介绍获取安全代码库的途径，以便代码重复使用，以及其他流行的开源系统，这些都将使您的智能合约更好、更安全、上市更快。 您将使用诸如 Foundry、Truffle、Ganache、OpenZeppelin 等工具，获得实用的动手演示，以帮助您意识到与智能合约相关的安全考虑。
Solidity is a purpose-made programming language for Ethereum and Ethereum-like blockchains to deliver smart contract capability. Ethereum is a global computing platform that allows for distributed survivable programs called smart contracts to be used by anyone, anywhere, for any reason. Smart contracts can be used to bridge two different blockchain systems, fulfill shipping and product delivery processes, and pay vendors on the certificated completion of specific tasks.Smart contracts are quickly becoming a regular business process that eliminates the middle person and allows for the frictionless global transfer of value. And billions of dollars are hacked out of smart contracts every year because of faulty coding practices with Solidity.This course introduces operators, and basic solidity constructs, then dive deep by example into secure coding practices that can be used to deliver more secure smart contracts. We review some of the most common security issues, such as reentrancy, overflows, underflows, external calls, and other places where flow control of the smart contract can be hijacked.Finally, we go over linting, QA, and DevOps tools that can help identify issues with code and how to use those tools to fix issues with code security. We also go over where to get secure code libraries for code reuse and other popular open-source systems that will make your smart contract better, safer, and quicker to market. You will work with tools like Foundry, Truffle, Ganache, OpenZeppelin, and others so that you get a practical hands-on demonstration of what is out there that can help you be aware of the security considerations when it comes to smart contracts
