|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/threat-modeling-from-novice-to-expert/
课程评论：没有评论
**课程名称：** 威胁建模：从入门到精通 **课程概述：** 本课程旨在帮助学习者深入理解威胁建模，并从基础概念逐步建立专业知识。课程内容全面，涵盖了从基础概念到高级实操练习，旨在培养学习者有效地识别、分析和缓解安全威胁的技能。 **通过结构化课程和实践练习，您将学到：** * **威胁建模入门：** 掌握威胁建模的基础知识、关键术语和核心概念。 * **是什么/为什么/何时/谁：** 理解威胁建模的益处、适当时机以及涉及的关键利益相关者。 * **如何进行威胁建模：** 遵循分步指南，通过实践练习分析应用程序的安全风险。 * **威胁建模方法：** 探索三种主要的威胁建模方法，并学习何时应用它们。 * **威胁建模方法论：** 深入了解 STRIDE、DREAD 和 PASTA 等方法，了解它们如何与建模方法相结合。 * **实践操作：** 通过对 Web 应用程序进行威胁建模，创建数据流图（DFD），并处理资产、数据流、信任边界和信任区域，获得实践经验。学习有效识别、优先处理和应对威胁。 **目标受众：** 本课程适合初学者和经验丰富的专业人士，尤其适合安全分析师、软件开发人员、系统架构师和 IT 经理，他们希望加强安全专业知识并在实际场景中实施威胁建模。无需任何先验知识，只需对网络安全和安全开发实践有浓厚兴趣。
Take a deep dive into Threat Modeling and build your expertise from the ground up. This comprehensive course covers everything from foundational concepts to advanced hands-on exercises, equipping you with the skills needed to identify, analyze, and mitigate security threats effectively.Through structured lessons and practical exercises, you'll learn:Introduction to Threat Modeling: Grasp the fundamentals, key terminologies, and essential concepts.What / Why / When / Who: Understand the benefits, timing, and key stakeholders involved in Threat Modeling.How to Threat Model: Follow a step-by-step guide with hands-on exercises to analyze an application's security risks.Threat Modeling Approaches: Explore the three primary approaches and learn when to apply each.Threat Modeling Methodologies: Delve into STRIDE, DREAD, and PASTA to see how methodologies align with modeling approaches.Hands-On Practice: Gain practical experience by threat modeling a web application, creating Data Flow Diagrams (DFD), and working with Assets, Data Flows, Trust Boundaries, and Trust Zones. Learn to identify, prioritize, and respond to threats effectively.Designed for beginners and experienced professionals alike, this course is ideal for security analysts, software developers, system architects, and IT managers looking to strengthen their security expertise and implement Threat Modeling in real-world scenarios. No prior experience is required-just a keen interest in cybersecurity and secure development practices.
