关于此课程： The design step in developing software has some unique characteristics. First of all, it’s the only step where drawing pictures of things is the norm. Why is that? What do pictures do that other representations cannot do? Pictures have varying levels of detail; pictures have context. Pictures…paint a picture. Why are these things important? In this course, too, we begin looking at other disciplines (building architecture is a favorite one) for lessons on design.
此课程适用人群： This is a graduate class and it will be best appreciated by students who have a solid foundation in basic software engineering, who can code well (although no real coding is required) and who have had at least internships if not full-time jobs in software development. This is not to say that you need to know how to design software before you learn about designing secure software. It is to say that the more experience you already have in software development, the more the examples and ideas put forth in this course will resonate with you.
制作方： University of Colorado System
教学方： Albert Glock, Instructor
Computer Science
| 基本信息 | 课程 4（共 4 门，Secure Software Design Specialization ） |
| 级别 | Intermediate |
| 承诺学习时间 | 4 weeks, 3-4 hours/week |
| 语言 | English |
| 如何通过 | 通过所有计分作业以完成课程。 |
授课大纲
第 1 周
Common Vulnerabilities and Weaknesses
How to use the CVE and CWE on-line databases to assess threats and mitigations
4 个视频, 4 个阅读材料, 2 个练习测验
- Leyendo: Additional Resource
- 视频: Open source threat and mitigation information
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 1
- Cuestionario de práctica: Open source threat and mitigation information
- 视频: Medical analogies
- Leyendo: Additional Resource
- 视频: Secure software design is good software design.
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 2
- Cuestionario de práctica: Secure software design is good software design
第 2 周
Specific Design Considerations
Specific things you can do to create a better design.
2 个视频, 2 个阅读材料, 1 个练习测验
- Leyendo: Additional Resource
- 视频: Design Principles in detail - II
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 3
- Cuestionario de práctica: Design Principles in detail
第 3 周
Building Security in
Security must be built in to a project, not added on.
2 个视频, 1 个练习测验
- 视频: Active vs Passive security
- Cuadro de aviso de la discusión: Discussion 4
- Cuestionario de práctica: Active vs Passive security
第 4 周
A Dramatic Failure
The consequences of a bad design can haunt you forever.
1 个视频, 1 个阅读材料, 1 个练习测验
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 5
- Cuestionario de práctica: Therac-25 Case Study
第 5 周
Bitcoin Foundations
A detailed look at the first two sentences of the abstract of Nakamoto's 2009 paper announcing Bitcoin.
2 个视频, 2 个阅读材料, 1 个练习测验
- Leyendo: Additional Resource
- 视频: Bitcoin Lecture 2
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 6
- Cuestionario de práctica: Bitcoin Foundations
第 6 周
The Bitcoin Project
Continuing with the abstract of Nakamoto's Bitcoin paper. More details on how it works and how security is integrated into it.
2 个视频, 2 个阅读材料, 1 个练习测验
- Leyendo: Additional Reading
- 视频: Bitcoin Lecture 4
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 7
- Cuestionario de práctica: Bitcoin 2
第 7 周
Simple software compromises
A look into the specifics of two common exploitation techniques--buffer overflow and SQL injections. Even though they're "old", these exploits are still used today!
3 个视频, 3 个阅读材料, 2 个练习测验
- Leyendo: Additional Resource
- 视频: SQL Injection
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 8
- Cuestionario de práctica: SQl Injection
- 视频: Software Life Cycle and Management considerations
- Leyendo: Additional Resource
- Cuadro de aviso de la discusión: Discussion 9
- Cuestionario de práctica: Software Life Cycle and Management considerations
第 8 周
Final Exam
A comprehensive course assessment comprising of 5 quizzes. Each assessment contains a randomized set of questions from different modules of the course.
已评分: Assessment 1
已评分: Assessment 2
已评分: Assessment 3
已评分: Assessment 4
已评分: Assessment 5
常见问题解答
运作方式
Trabajo del curso
Cada curso es como un libro de texto interactivo, con videos pregrabados, cuestionarios y proyectos.
Ayuda de tus compañeros
Conéctate con miles de estudiantes y debate ideas y materiales del curso, y obtén ayuda para dominar los conceptos.
Certificados
Obtén reconocimiento oficial por tu trabajo y comparte tu éxito con amigos, compañeros y empleadores.
制作方
University of Colorado System
The University of Colorado is a recognized leader in higher education on the national and global stage. We collaborate to meet the diverse needs of our students and communities. We promote innovation, encourage discovery and support the extension of knowledge in ways unique to the state of Colorado and beyond.
价格
| 购买课程 | |
|---|---|
| 访问课程材料 | 可用 |
| 访问评分的材料 | 可用 |
| 收到最终成绩 | 可用 |
| 获得可共享的课程证书 | 可用 |
评分和审阅
