|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/secure-software-requirements-secure-dev-series-course-2-of-8/
课程评论：没有评论
课程名称：安全软件需求（Secure Software Requirements）安全开发系列课程第2部分，共8部分 课程概述：在安全开发系列的第2部分课程中，我们将介绍什么是安全软件需求，以及为什么软件即使满足所有质量要求仍然可能不安全。需要注意的是，本课程是为初学者提供基础概念，**并非编程课程，也没有动手实践**。本课程专注于安全的基础软件设计，涵盖功能性和非功能性需求、政策分解、数据分类和误用案例等基础概念。 课程还将包括监管和行业要求以及法律要求等多个主题。此外，课程提供了一些复习问题和白板讨论，以深入探讨一些重要话题。最后，整个系列课程（共8门）覆盖CSSLP考试目标的65%以上！课程中我们讨论了及早设计安全的许多好处。 课程目标受众：此课程适合开发人员或软件工程师，目的是让他们了解软件开发中的 IT 安全基础知识。 课程前提：本课程没有前提要求。 学到的内容： - 安全开发的关键要素 - CIA三元组、AAA及其他安全基础知识 - 确定安全软件程序所需的正确构建要求 - 如何指定满足软件安全要求的适当软件架构 - 了解软件接收的公认最佳实践 - 确定软件程序的适当软件采购和供应链要求 - 了解安全软件程序的正确测试程序 课程内容包括： - 课程概述 - 教员介绍 - 功能性和非功能性需求 - 识别安全需求 - 政策分解 - 数据分类 - 主体-客体矩阵 - 用例和误用案例建模 - 监管和行业要求 - 法律要求 - 隐私要求 - 安全需求可追溯性矩阵 - 课程复习 - 课程复习问题 - 课程结束 此课程内容丰富，适合希望理解安全软件开发基础的开发人员和软件工程师。
Course OverviewIn this Course 2 of the Secure Development Series we cover what secure software requirements are and why software can meet all quality requirements and still be insecure. Please note that this course is providing introductory concepts for beginners and is NOT a programming course or has any hands on.This course specifically, Secure Software Requirements is meant to provide learners a foundational start in software design that is focused around security. The course covers foundational concepts such as the functional and non functional requirements, Policy decomposition, data classifications, and misuse casesThe course continues on to cover Regulatory and Industry as well as legal requirements to name a few lessons. The course provides some review questions and also whiteboard discussions to provide insight into some important topics. Lastly, the course series covers(8 courses) about 65% or more of the exam objectives for the CSSLP exam when completing all eight courses!There are many benefits of designing security early which we cover in this course.This is a series of courses for learning about "Secure Software Development Fundamentals"Course 1 - Secure Software ConceptsCourse 2 - Secure Software RequirementsCourse 3 - Secure Software DesignCourse 4 - Defining Security ArchitecturesCourse 5 - Secure Software TestingCourse 6 - Secure Software AcceptanceCourse 7 - Software Deployment, Operations and MaintenanceCourse 8 - Supply Chain and Software AcquisitionWho should take this course (Target Audience)?You are a developer or software engineer and want to understandYou want to learn IT security fundamentals focused on software developmentWhat are the Couse Pre Requirements?There are no course pre-requirementWhat You'll LearnWhat are the critical aspects of secure developmentWhat is the CIA Triad, AAA and other security fundamentalsIdentify the correct software build requirements needed for a secure software programDetermine how to specify the proper software architecture to meet your software security requirementsUnderstand what the commonly accepted best practices are software acceptanceDetermine the proper software acquisition and supply chain requirements for your software programsGet to know the proper software testing procedure for a secure software program.RequirementsNo RequirementsCourse ContentsCourse Overview Instructor Intro Course Prereqs Course Overview Instructor Intro Course Prereqs Functional and Non Functional Requirements Identifying Security Requirements Policy Decompisition Data Classification Subject Object Matrix Use Case and MisUse Case Modeling Regulartory and Industry Requirements Legal Requirements Privacy Requirements Security Requirements Traceability Matrix Course Review Course Review Questions Course Closeout
