CertNexus Cyber Secure Coder (CSC-210)

اكتب برمجيات يصعب على المهاجمين اختراقها. تحدّد المتطلبات الأمنية

3 أياممتوسط7 وحداتCSC-210Cyber Secure Coder (CSC)

نظرة عامة

اكتب برمجيات يصعب على المهاجمين اختراقها. تحدّد المتطلبات الأمنية، وتزيل الثغرات الشائعة، وتصمّم بأمان، وتطبّق الحمايات المعيارية، وتختبر نقاط الضعف، وتحافظ على أمان البرمجيات بعد نشرها، استعداداً لشهادة Cyber Secure Coder.

ما ستتعلّمه

المحتوى التقني أدناه معروضٌ باللغة الإنجليزية كما ورد في منهاج الدورة، حفاظاً على دقّة المصطلحات.

Employ secure software development best practices
Identify security requirements for your projects
Eliminate vulnerabilities and misconfigurations in code
Use a security-by-design approach to architect secure systems
Protect users and sensitive data with common controls
Apply testing methods to find and fix security defects
Maintain deployed software to ensure ongoing security

المنهاج

7 وحدات

Security throughout the development process
Business, compliance, and user requirements
Identifying factors undermining software security
Recognizing vulnerabilities and attack patterns
Gathering vulnerability intelligence

Addressing software defects and misconfiguration
Managing risks from third-party code
Handling human factors and social engineering
Improving development process security

Applying secure design principles (OWASP, defense in depth, least privilege)
Threat modeling and risk assessment
Identifying and countering specific threats

Secure coding best practices and checklists
Avoiding common programming errors (buffer overflows, input validation, etc.)
Preventing platform, privacy, and web/mobile vulnerabilities

Access control, authentication, and session management
Protecting data in transit and at rest (encryption, PKI)
Secure error handling, logging, and output restrictions
Preventing SQL injection and securing database access

Security testing phases and strategies
Static and dynamic code analysis
Automated tools for vulnerability detection

Monitoring and logging applications
Ongoing patch management and maintenance
Secure deprovisioning and uninstallation

لمن هذه الدورة

مطوّرو البرمجيات والمختبِرون والمعماريون بأي لغة برمجة.

قبل أن تبدأ

This course presents secure programming concepts that apply to many different types of software development projects. Although this course uses Python®, HTML, and JavaScript® to demonstrate various programming concepts, you do not need to have experience in these languages to benefit from this course. However, you should have some programming experience, whether it be developing desktop, mobile, web, or cloud applications.

الشهادة