This course builds upon the skills and coding practices learned in both Principles of Secure Coding and Identifying Security Vulnerabilities, courses one and two, in this specialization. This course uses the focusing technique that asks you to think about: “what to watch out for” and “where to look” to evaluate and ultimately remediate fragile C++ library code.
Dieser Kurs ist Teil der Spezialisierung Spezialisierung Secure Coding Practices
6.825 bereits angemeldet
von
Spezialisierung Secure Coding PracticesUniversity of California, DavisÜber diesen Kurs
5.486 kürzliche Aufrufe
Flexible Fristen
Setzen Sie Fristen gemäß Ihrem Zeitplan zurück.
Zertifikat zur Vorlage
Erhalten Sie nach Abschluss ein Zertifikat
100 % online
Beginnen Sie sofort und lernen Sie in Ihrem eigenen Tempo.
Kurs 3 von 4 in
Stufe „Mittel“
Ca. 23 Stunden zum Abschließen
Englisch
Untertitel: Französisch, Portugiesisch (europäisch), Russisch, Englisch, Spanisch
Könnte Ihr Unternehmen von Mitarbeiterweiterbildungen für gefragte Kompetenzen profitieren?
Probieren Sie Coursera for Business ausWas Sie lernen werden
Apply “what to watch out for” and “where to look” to evaluate fragility of C++ library code.
Given a fragile C++ library, code a robust version.
Identify problems w/ privilege, trusted environments, input validation, files & sub-processes, resource mngmt, asynchronicity, & randomness in C/C++.
Remediate examples of problems that apply to C/C++ interactions with the programming environment.
Kompetenzen, die Sie erwerben
- Identifying vulernabilities
- C/C++ Programming
Flexible Fristen
Setzen Sie Fristen gemäß Ihrem Zeitplan zurück.
Zertifikat zur Vorlage
Erhalten Sie nach Abschluss ein Zertifikat
100 % online
Beginnen Sie sofort und lernen Sie in Ihrem eigenen Tempo.
Kurs 3 von 4 in
Stufe „Mittel“
Ca. 23 Stunden zum Abschließen
Englisch
Untertitel: Französisch, Portugiesisch (europäisch), Russisch, Englisch, Spanisch
Könnte Ihr Unternehmen von Mitarbeiterweiterbildungen für gefragte Kompetenzen profitieren?
Probieren Sie Coursera for Business aus
von
University of California, Davis
UC Davis, one of the nation’s top-ranked research universities, is a global leader in agriculture, veterinary medicine, sustainability, environmental and biological sciences, and technology. With four colleges and six professional schools, UC Davis and its students and alumni are known for their academic excellence, meaningful public service and profound international impact.
Lehrplan - Was Sie in diesem Kurs lernen werden
7 Stunden zum Abschließen
Users, Privileges, and Environment Variables
In this module, you will be able to manage users and privileges when you run programs or sub-programs. You will be able to identify and use the different types of privileges on a Linux (and UNIX-like) system. You'll be able to identify how program shells preserve environment settings. You will be able to examine how your shell (or other program that uses the PATH variable) deals with multiple versions of that variable.
7 Stunden zum Abschließen
17 Videos (Gesamt 107 min), 4 Lektüren, 2 Quiz
6 Stunden zum Abschließen
Validation and Verification, Buffer and Numeric Overflows, and Input Injections
In this module, you will be able to breakdown how the process of checking inputs, known as validation and verification works. You will be able to avoid and buffer numeric overflows in your programs. You will be able to discover what happens when you call functions with parameters that cause overflows. And finally, you will be able to detect various input injections such as cross-site scripting and SQL injections and be able to describe the consequences of not examining input.
6 Stunden zum Abschließen
17 Videos (Gesamt 162 min), 2 Lektüren, 2 Quiz
3 Stunden zum Abschließen
Files, Subprocesses, and Race Conditions
In this module, you will be able to describe how files and subprocesses interact and be able to create subprocesses and shell scripts. You will also be able to identify and prevent race conditions in your programs and practice cleaning out environments to make them safe for untrusted subprocesses.
3 Stunden zum Abschließen
13 Videos (Gesamt 80 min), 1 Lektüre, 2 Quiz
7 Stunden zum Abschließen
Randomness, Cryptography, and Other Topics
In this module you will be able to distinguish between pseudo-randomness and actual randomness. You will be able to apply randomness in the coding environment and generate random numbers and look at their distribution. You'll be able to identify and describe how and why cryptography is used, as well as why you should use trusted cryptography code libraries instead of crafting your own solution. You will be able to analyze and consider best practices for handling sensitive information, passwords, crypto keys, how to handle errors in security sensitive programs, and how to defend against string attacks. You will be able to hash a password and then try to guess another one. You will be able to practice cleaning out environments to make them safe for untrusted subprocesses, as well as practice handling integer overflow.
7 Stunden zum Abschließen
19 Videos (Gesamt 97 min), 4 Lektüren, 2 Quiz
Bewertungen
- 5 stars75 %
- 4 stars13,88 %
- 3 stars9,72 %
- 1 star1,38 %
Top-Bewertungen von IDENTIFYING SECURITY VULNERABILITIES IN C/C++PROGRAMMING
von VP30. Nov. 2020
More code and Example would be good in this code, Example code for Discussion would be good for ideal reference
von RK12. Mai 2020
Practical demos could have added more fun to this course.
von BB22. Feb. 2021
I liked the course and the instructor is really nice. It could use more code. This course has very minimal code.
von HH30. Mai 2020
Thoroughly enjoyed the course. learned a lot. thank you.
Über den Spezialisierung Secure Coding Practices
This Specialization is intended for software developers of any level who are not yet fluent with secure coding and programming techniques.Through four courses, you will cover the principles of secure coding, concepts of threat modeling and cryptography and exploit vulnerabilities in both C/C++ and Java languages, which will prepare you to think like a hacker and protect your organizations information. The courses provide ample practice activities including exploiting WebGoat, an OWASP project designed to teach penetration testing.
Häufig gestellte Fragen
Wann erhalte ich Zugang zu den Vorträgen und Aufgaben?
Was bekomme ich, wenn ich diese Spezialisierung abonniere?
Ist finanzielle Unterstützung möglich?
Haben Sie weitere Fragen? Besuchen Sie das Learner Help Center.
