À propos de ce cours : The design step in developing software has some unique characteristics. First of all, it’s the only step where drawing pictures of things is the norm. Why is that? What do pictures do that other representations cannot do? Pictures have varying levels of detail; pictures have context. Pictures…paint a picture. Why are these things important? In this course, too, we begin looking at other disciplines (building architecture is a favorite one) for lessons on design.
Les destinataires de ce cours : This is a graduate class and it will be best appreciated by students who have a solid foundation in basic software engineering, who can code well (although no real coding is required) and who have had at least internships if not full-time jobs in software development. This is not to say that you need to know how to design software before you learn about designing secure software. It is to say that the more experience you already have in software development, the more the examples and ideas put forth in this course will resonate with you.
Créé par : University of Colorado System
Enseigné par : Albert Glock, Instructor
Computer Science
| Informations de base | Cours 4 de 4 dans Secure Software Design Specialization |
| Niveau | Intermediate |
| Engagement | 4 weeks, 3-4 hours/week |
| Langue | English |
| Comment réussir | Réussissez tous les devoirs notés pour terminer le cours. |
Programme de cours
SEMAINE 1
Common Vulnerabilities and Weaknesses
How to use the CVE and CWE on-line databases to assess threats and mitigations
4 vidéos, 4 lectures, 2 quiz pour s'exercer
- Vidéo: Introduction to Threats and Mitigations
- Leitura: Additional Resource
- Vidéo: Open source threat and mitigation information
- Leitura: Additional Resource
- Prompt de discussão: Discussion 1
- Teste para praticar: Open source threat and mitigation information
- Vidéo: Medical analogies
- Leitura: Additional Resource
- Vidéo: Secure software design is good software design.
- Leitura: Additional Resource
- Prompt de discussão: Discussion 2
- Teste para praticar: Secure software design is good software design
SEMAINE 2
Specific Design Considerations
Specific things you can do to create a better design.
2 vidéos, 2 lectures, 1 quiz pour s'exercer
- Vidéo: Design Principles in detail -- I
- Leitura: Additional Resource
- Vidéo: Design Principles in detail - II
- Leitura: Additional Resource
- Prompt de discussão: Discussion 3
- Teste para praticar: Design Principles in detail
SEMAINE 3
Building Security in
Security must be built in to a project, not added on.
2 vidéos, 1 quiz pour s'exercer
- Vidéo: Security as a build-on, not an add-on
- Vidéo: Active vs Passive security
- Prompt de discussão: Discussion 4
- Teste para praticar: Active vs Passive security
SEMAINE 4
A Dramatic Failure
The consequences of a bad design can haunt you forever.
1 vidéo, 1 lecture, 1 quiz pour s'exercer
- Vidéo: Therac-25 Case Study
- Leitura: Additional Resource
- Prompt de discussão: Discussion 5
- Teste para praticar: Therac-25 Case Study
SEMAINE 5
Bitcoin Foundations
A detailed look at the first two sentences of the abstract of Nakamoto's 2009 paper announcing Bitcoin.
2 vidéos, 2 lectures, 1 quiz pour s'exercer
- Vidéo: Intro to Bitcoin
- Leitura: Additional Resource
- Vidéo: Bitcoin Lecture 2
- Leitura: Additional Resource
- Prompt de discussão: Discussion 6
- Teste para praticar: Bitcoin Foundations
SEMAINE 6
The Bitcoin Project
Continuing with the abstract of Nakamoto's Bitcoin paper. More details on how it works and how security is integrated into it.
2 vidéos, 2 lectures, 1 quiz pour s'exercer
- Vidéo: Bitcoin Lecture 3
- Leitura: Additional Reading
- Vidéo: Bitcoin Lecture 4
- Leitura: Additional Resource
- Prompt de discussão: Discussion 7
- Teste para praticar: Bitcoin 2
SEMAINE 7
Simple software compromises
A look into the specifics of two common exploitation techniques--buffer overflow and SQL injections. Even though they're "old", these exploits are still used today!
3 vidéos, 3 lectures, 2 quiz pour s'exercer
- Vidéo: Buffer Overflow
- Leitura: Additional Resource
- Vidéo: SQL Injection
- Leitura: Additional Resource
- Prompt de discussão: Discussion 8
- Teste para praticar: SQl Injection
- Vidéo: Software Life Cycle and Management considerations
- Leitura: Additional Resource
- Prompt de discussão: Discussion 9
- Teste para praticar: Software Life Cycle and Management considerations
SEMAINE 8
Final Exam
A comprehensive course assessment comprising of 5 quizzes. Each assessment contains a randomized set of questions from different modules of the course.
Noté: Assessment 1
Noté: Assessment 2
Noté: Assessment 3
Noté: Assessment 4
Noté: Assessment 5
FAQ
Comment cela fonctionne
Trabalho
Cada curso é como um livro didático interativo, com vídeos pré-gravados, testes e projetos.
Ajuda dos seus colegas
Conecte-se com milhares de outros aprendizes, debata ideias, discuta sobre os materiais do curso e obtenha ajuda para dominar conceitos.
Certificados
Obtenha reconhecimento oficial pelo seu trabalho e compartilhe seu sucesso com amigos, colegas e empregadores.
Créateurs
University of Colorado System
The University of Colorado is a recognized leader in higher education on the national and global stage. We collaborate to meet the diverse needs of our students and communities. We promote innovation, encourage discovery and support the extension of knowledge in ways unique to the state of Colorado and beyond.
Tarification
| Acheter le cours | |
|---|---|
| Accéder au contenu du cours | Disponible |
| Accéder au contenu noté | Disponible |
| Recevoir une Note Finale | Disponible |
| Obtenir un Certificat de Cours partageable | Disponible |
Notation et examens
Coursera propose un accès universel à la meilleure formation au monde,
en partenariat avec des universités et des organisations du plus haut niveau, pour proposer des cours en ligne.
© 2018 Coursera Inc. Tous droits réservés.
