课程信息

11,987 次近期查看
可分享的证书
完成后获得证书
100% 在线
立即开始,按照自己的计划学习。
第 4 门课程(共 4 门)
可灵活调整截止日期
根据您的日程表重置截止日期。
中级
完成时间大约为24 小时
英语(English)
字幕:英语(English)

您将学到的内容有

  • Practice protecting against various kinds of cross-site scripting (XSS) attacks.

  • Form plans to mitigate injection vulnerabilities in your web application.

  • Create strategies and controls to provide secure authentication.

  • Examine code to find and patch vulnerable components.

您将获得的技能

Javasecure programmingJava Programmingsecurity
可分享的证书
完成后获得证书
100% 在线
立即开始,按照自己的计划学习。
第 4 门课程(共 4 门)
可灵活调整截止日期
根据您的日程表重置截止日期。
中级
完成时间大约为24 小时
英语(English)
字幕:英语(English)

提供方

加州大学戴维斯分校 徽标

加州大学戴维斯分校

教学大纲 - 您将从这门课程中学到什么

1

1

完成时间为 7 小时

Setup and Introduction to Cross Site Scripting Attacks

完成时间为 7 小时
14 个视频 (总计 89 分钟), 3 个阅读材料, 2 个测验
14 个视频
Overview of Resources and Tools for This Course4分钟
Setup and Introduction to Cross-site Scripting1分钟
Tips and Tricks to Use Git for Course and Project8分钟
How to Import WebGoat into IDE7分钟
How to Run WebGoat in a Docker Container5分钟
Injection Attacks: What They Are and How They Affect Us9分钟
Cross-site Scripting (XSS), Part 110分钟
Protecting Against Cross-site Scripting (XSS), Part 29分钟
Patching Reflected Cross-site Scripting (XSS), Part 36分钟
Stored Cross-site Scripting (XSS)14分钟
Dangers of Cross-site Scripting (XSS) Attacks4分钟
A Note About Finding Lessons on WebGoat32
Introduction to Labs (Peer Reviewed)2分钟
3 个阅读材料
A Note From UC Davis10分钟
OWASP Cross Site Scripting Prevention Cheat Sheet1小时
Note About Peer Review Assignments10分钟
1 个练习
Module 1 Quiz30分钟
2

2

完成时间为 7 小时

Injection Attacks

完成时间为 7 小时
10 个视频 (总计 80 分钟), 2 个阅读材料, 2 个测验
10 个视频
Tutorial: Using a Proxy to Intercept Traffic from Client to Servers7分钟
SQL Syntax and Basics: Putting On the Attacker Hat10分钟
Solution to SQL Injection Attacks (SQLi)7分钟
SQL Injection Attacks: Evaluation of Code13分钟
XML External Entity (XXE) Attacks8分钟
Demo of an XML External Entity (XXE) Attack to Gain Remote Code Execution (RCE)5分钟
Evaluation of Code - XXE through a REST Framework8分钟
Solution: Evaluation of Code - XXE through a REST Framework8分钟
Patching the XXE Vulnerability9分钟
2 个阅读材料
OWASP SQL Injection Prevention Cheat Sheet45分钟
OWASP XML External Entity Prevention Cheat Sheet45分钟
1 个练习
Module 2 Quiz30分钟
3

3

完成时间为 6 小时

Authentication and Authorization

完成时间为 6 小时
12 个视频 (总计 57 分钟), 2 个阅读材料, 2 个测验
12 个视频
Introduction to Authentication Flaws in WebGoat1分钟
Authentication Bypass Exploit3分钟
Tips and Tricks for Burp Suite: Use Proxy to Intercept Traffic4分钟
Solution to Authentication Bypass: Evaluation of Code7分钟
Finding Vulnerabilities and Logical Flaws in Source Code10分钟
Introduction to JSON Web Tokens (JWT) and Authentication Bypass49
Authentication Flaw JSON Web Tokens (JWT)7分钟
Solution Demo: Exploiting JSON Web Tokens (JWT)8分钟
Evaluating Code to Find the JSON Web Tokens (JWT) Flaw4分钟
Hint Video: (JWT) Patching the Vulnerable Code in WebGoat47
Solution to Patch JWT Flaw6分钟
2 个阅读材料
OWASP Transaction Authorization Cheat Sheet1小时
A Beginner's Guide to JWTs in Java'45分钟
1 个练习
Module 3 Quiz30分钟
4

4

完成时间为 4 小时

Dangers of Vulnerable Components and Final Project

完成时间为 4 小时
5 个视频 (总计 26 分钟), 3 个阅读材料, 2 个测验
5 个视频
Vulnerable Components (XStream Library)9分钟
Solution: Fixing Vulnerabilities with XStream11分钟
Introduction to Labs (Peer Reviewed)2分钟
Course Summary1分钟
3 个阅读材料
Article: How Hackers Broke Equifax: Exploiting a Patchable Vulnerabil10分钟
Article: Exploiting OGNL Injection in Apache Struts30分钟
Note About Peer Review Assignments10分钟
1 个练习
Module 4 Practice Quiz5分钟

审阅

来自EXPLOITING AND SECURING VULNERABILITIES IN JAVA APPLICATIONS的热门评论

查看所有评论

关于 Secure Coding Practices 专项课程

This Specialization is intended for software developers of any level who are not yet fluent with secure coding and programming techniques.Through four courses, you will cover the principles of secure coding, concepts of threat modeling and cryptography and exploit vulnerabilities in both C/C++ and Java languages, which will prepare you to think like a hacker and protect your organizations information. The courses provide ample practice activities including exploiting WebGoat, an OWASP project designed to teach penetration testing....
Secure Coding Practices

常见问题

  • Access to lectures and assignments depends on your type of enrollment. If you take a course in audit mode, you will be able to see most course materials for free. To access graded assignments and to earn a Certificate, you will need to purchase the Certificate experience, during or after your audit. If you don't see the audit option:

    • The course may not offer an audit option. You can try a Free Trial instead, or apply for Financial Aid.
    • The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
  • 您注册课程后,将有权访问专项课程中的所有课程,并且会在完成课程后获得证书。您的电子课程证书将添加到您的成就页中,您可以通过该页打印您的课程证书或将其添加到您的领英档案中。如果您只想阅读和查看课程内容,可以免费旁听课程。

  • 如果订阅,您可以获得 7 天免费试听,在此期间,您可以取消课程,无需支付任何罚金。在此之后,我们不会退款,但您可以随时取消订阅。请阅读我们完整的退款政策

  • 是的,Coursera 可以为无法承担费用的学生提供助学金。通过点击左侧“注册”按钮下的“助学金”链接可以申请助学金。您可以根据屏幕提示完成申请,申请获批后会收到通知。您需要针对专项课程中的每一门课程完成上述步骤,包括毕业项目。了解更多

  • 此课程不提供大学学分,但部分大学可能会选择接受课程证书作为学分。查看您的合作院校,了解详情。Coursera 上的在线学位Mastertrack™ 证书提供获得大学学分的机会。

还有其他问题吗?请访问 学生帮助中心