关于此课程： The design step in developing software has some unique characteristics. First of all, it’s the only step where drawing pictures of things is the norm. Why is that? What do pictures do that other representations cannot do? Pictures have varying levels of detail; pictures have context. Pictures…paint a picture. Why are these things important? In this course, too, we begin looking at other disciplines (building architecture is a favorite one) for lessons on design.
此课程适用人群： This is a graduate class and it will be best appreciated by students who have a solid foundation in basic software engineering, who can code well (although no real coding is required) and who have had at least internships if not full-time jobs in software development. This is not to say that you need to know how to design software before you learn about designing secure software. It is to say that the more experience you already have in software development, the more the examples and ideas put forth in this course will resonate with you.
制作方： University of Colorado System
教学方： Albert Glock, Instructor
Computer Science
| 基本信息 | 课程 4（共 4 门，Secure Software Design Specialization ） |
| 级别 | Intermediate |
| 承诺学习时间 | 4 weeks, 3-4 hours/week |
| 语言 | English |
| 如何通过 | 通过所有计分作业以完成课程。 |
授课大纲
第 1 周
Common Vulnerabilities and Weaknesses
How to use the CVE and CWE on-line databases to assess threats and mitigations
4 视频, 4 阅读材料, 2 练习测试
- 视频: Introduction to Threats and Mitigations
- Reading: Additional Resource
- 视频: Open source threat and mitigation information
- Reading: Additional Resource
- Discussion Prompt: Discussion 1
- Practice Quiz: Open source threat and mitigation information
- 视频: Medical analogies
- Reading: Additional Resource
- 视频: Secure software design is good software design.
- Reading: Additional Resource
- Discussion Prompt: Discussion 2
- Practice Quiz: Secure software design is good software design
第 2 周
Specific Design Considerations
Specific things you can do to create a better design.
2 视频, 2 阅读材料, 1 练习测试
- 视频: Design Principles in detail -- I
- Reading: Additional Resource
- 视频: Design Principles in detail - II
- Reading: Additional Resource
- Discussion Prompt: Discussion 3
- Practice Quiz: Design Principles in detail
第 3 周
Building Security in
Security must be built in to a project, not added on.
2 视频, 1 练习测试
- 视频: Security as a build-on, not an add-on
- 视频: Active vs Passive security
- Discussion Prompt: Discussion 4
- Practice Quiz: Active vs Passive security
第 4 周
A Dramatic Failure
The consequences of a bad design can haunt you forever.
1 视频, 1 阅读材料, 1 练习测试
- 视频: Therac-25 Case Study
- Reading: Additional Resource
- Discussion Prompt: Discussion 5
- Practice Quiz: Therac-25 Case Study
第 5 周
Bitcoin Foundations
A detailed look at the first two sentences of the abstract of Nakamoto's 2009 paper announcing Bitcoin.
2 视频, 2 阅读材料, 1 练习测试
- 视频: Intro to Bitcoin
- Reading: Additional Resource
- 视频: Bitcoin Lecture 2
- Reading: Additional Resource
- Discussion Prompt: Discussion 6
- Practice Quiz: Bitcoin Foundations
第 6 周
The Bitcoin Project
Continuing with the abstract of Nakamoto's Bitcoin paper. More details on how it works and how security is integrated into it.
2 视频, 2 阅读材料, 1 练习测试
- 视频: Bitcoin Lecture 3
- Reading: Additional Reading
- 视频: Bitcoin Lecture 4
- Reading: Additional Resource
- Discussion Prompt: Discussion 7
- Practice Quiz: Bitcoin 2
第 7 周
Simple software compromises
A look into the specifics of two common exploitation techniques--buffer overflow and SQL injections. Even though they're "old", these exploits are still used today!
3 视频, 3 阅读材料, 2 练习测试
- 视频: Buffer Overflow
- Reading: Additional Resource
- 视频: SQL Injection
- Reading: Additional Resource
- Discussion Prompt: Discussion 8
- Practice Quiz: SQl Injection
- 视频: Software Life Cycle and Management considerations
- Reading: Additional Resource
- Discussion Prompt: Discussion 9
- Practice Quiz: Software Life Cycle and Management considerations
第 8 周
Final Exam
A comprehensive course assessment comprising of 5 quizzes. Each assessment contains a randomized set of questions from different modules of the course.
已评分: Assessment 1
已评分: Assessment 2
已评分: Assessment 3
已评分: Assessment 4
已评分: Assessment 5
常见问题解答
运作方式
Coursework
Each course is like an interactive textbook, featuring pre-recorded videos, quizzes and projects.
Help from Your Peers
Connect with thousands of other learners and debate ideas, discuss course material, and get help mastering concepts.
Certificates
Earn official recognition for your work, and share your success with friends, colleagues, and employers.
制作方
University of Colorado System
The University of Colorado is a recognized leader in higher education on the national and global stage. We collaborate to meet the diverse needs of our students and communities. We promote innovation, encourage discovery and support the extension of knowledge in ways unique to the state of Colorado and beyond.
价格
| 购买课程 | |
|---|---|
| 访问课程材料 | 可用 |
| 访问评分的材料 | 可用 |
| 收到最终成绩 | 可用 |
| 获得可共享的课程证书 | 可用 |
评分和审阅
