EdX

Secure Software Development: Requirements, Design, and Reuse (edX)

Secure Software Development: Requirements, Design, and Reuse (edX)

Learn the security basics that allow you to develop software that is hardened against attacks, and understand how you can reduce the damage and speed the response when a vulnerability is exploited.

Class Deals by MOOC List - Click here and see EdX's Active Discounts, Deals, and Promo Codes.

Modern software is under constant attack, but many software developers have never been told how to effectively counter those attacks. This course works to solve that problem, by explaining the fundamentals of developing secure software. Geared towards software developers, DevOps professionals, software engineers, web application developers, and others interested in learning how to develop secure software, this course focuses on practical steps that can be taken, even with limited resources, to improve information security. This course will enable software developers to create and maintain systems that are much harder to successfully attack, reduce the damage when attacks are successful, and speed the response so that any latent vulnerabilities can be rapidly repaired.
This course discusses the basics of security, such as what risk management really means. It discusses how to consider security as part of the requirements of a system, and what potential security requirements you might consider. This part then discusses how to design software to be secure, including various secure design principles that will help you avoid bad designs and embrace good ones. It also discusses how to secure your software supply chain, that is, how to more securely select and acquire reused software (including open source software) to enhance security.
This is the first of the three courses in the Secure Software Development Fundamentals Professional Certificate program, and was developed by the Open Source Security Foundation (OpenSSF), a project of the Linux Foundation focused on securing the open source ecosystem. The training courses included in this program focus on practical steps that you (as a developer) can take to counter most common kinds of attacks.
This course is part of the Secure Software Development Fundamentals Professional Certificate.

What you'll learn

  • Security basics: risk management, the “CIA” triad, and requirements.
  • Secure design principles: what are principles such as “least privilege” and how to apply these principles.
  • Supply chain evaluation: tips on how to choose packages to reuse, and how to reuse them so that you can rapidly be alerted & update.

Syllabus

. Welcome!
. Security Basics
. Secure Design Principles
. Reusing External Software
. Final Exam (Verified track only)

Go to Class
MOOC List is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Related Courses

Network Security - Introduction to Network Security (edX) EdX
New York University,NYUx

Network Security - Introduction to Network Security (edX)

Learn fundamentals of network security, including a deep dive into how networks are attacked by malicious users. This is a self-paced course that provides an introduction to network security topics. The curriculum focusses on how malicious users attack networks. The material is essential in later classes that will develop ethical hacking skills. Students are introduced to some key concepts in network security. Next, we provide an overview of network reconnaissance strategies.

Self Paced
Self-Paced
Cybersecurity Roles and Operating System Security (edX) EdX
IBM

Cybersecurity Roles and Operating System Security (edX)

This course gives you the background needed to understand basic Cybersecurity around people. process and technology. No matter if you are new to the cybersecurity field or are looking to change careers, this course will help you understand the roles of system security professionals available within an organization from the chief information security officier (CISO) to security analysts.

Self Paced
Self-Paced
Network Security - Protocols (edX) EdX
New York University,NYUx

Network Security - Protocols (edX)

Learn more fundamentals of network security, including cryptographic algorithms used in networking protocols, TLS/SSL, IPSec Layer 2 Security and Wireless Security. Students are provided with a broad understanding of cryptography, from its classical applications dating from the Roman empire to modern cryptography, including the public key cryptography and hashing techniques today.

Future dates to be announced
5-12 Weeks
Information Security - Introduction to Information Security (edX) EdX
New York University,NYUx

Information Security - Introduction to Information Security (edX)

Learn the fundamentals of information security, including Security Design Principles, Threat Modeling and Security Policy. This is a self-paced course that provides an introduction to information security and cybersecurity. Students gain a broad overview of Information Security and Privacy (ISP) through high-level ISP concepts. We discuss both traditional design principles and principles that were developed to design secure systems.

Self Paced
Self-Paced
Cybersecurity Risk Management (edX) EdX
Rochester Institute of Technology,RITx

Cybersecurity Risk Management (edX)

Learn key principles of risk analysis, risk assessment and risk mitigation for information security using both qualitative and quantitative methodologies. Cybersecurity risk management guides a growing number of IT decisions. Cybersecurity risks continue to have critical impacts on overall IT risk modeling, assessment and mitigation.

Jan 8th 2024
5-12 Weeks
Fundamentos del Internet de las cosas (IoT): Seguridad I (edX) EdX
Galileo University,GalileoX

Fundamentos del Internet de las cosas (IoT): Seguridad I (edX)

Aprende la importancia de la seguridad en dispositivos IoT, sus vulnerabilidades y amenazas más comunes, al igual que los modelos de seguridad para mitigarlas. Los dispositivos IoT conectados al Internet están creciendo de manera exponencial, e influyen en diferentes ámbitos, desde el empresarial hasta el de consumo.

Self Paced
Self-Paced