jungseungho5703

Đây là bài giảng giúp bạn có thể hiểu được ngay cả khi hoàn toàn không biết Lập trình an toàn (Secure Coding) là gì. Sau khi nắm vững các khái niệm lập trình an toàn cơ bản, bài giảng sẽ tập trung giải thích về bảo mật dịch vụ web. Đây là bài giảng từng được tổ chức dưới dạng chuyên đề đặc biệt do Đại học OO chủ trì. Với hơn 160 mã nguồn đi kèm chú thích phong phú, bài giảng giúp bạn nắm bắt chính xác các chủ đề và kỹ thuật cốt lõi có thể áp dụng ngay vào thực tế.

arigaram

Phân tích chi tiết Lập trình an toàn (Secure Coding)

보안교육

실습 중심

This lecture is designed to be easily understood even if you have no prior knowledge of Secure Coding. After covering fundamental secure coding concepts, it focuses on web service security. This course was originally conducted as a special lecture hosted by OO University. It provides over 160 source codes with extensive comments, pinpointing core topics and techniques that can be applied immediately in the field.

입문

초급

중급이상

Penetration Testing

security

security training

Breaking Down Secure Coding

<1st Edition> Course Guide (To be deleted upon completion of the 2nd Edition course below)

<2nd Edition> Section 1. Course Information

<1st Edition> [Secure Coding Overview and Basics] Importance of Secure Coding (Scheduled to be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 2. [Secure Coding Overview and Basics] Importance of Secure Coding

<1st Edition> [Secure Coding Overview and Basics] Threat Modeling (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 3. [Secure Coding Overview and Basics] Threat Modeling

<1st Edition> [Secure Coding Overview and Basics] Coding Standards and Guidelines (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 4. [Secure Coding Overview and Basics] Coding Standards and Guidelines

<1st Edition> [Secure Coding Overview and Basics] Basic Practice - Safe Input Handling (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 5. [Secure Coding Overview and Basics] Basic Practice - Secure Input Handling

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Overview of Security Vulnerabilities by Language (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 6. [Security Vulnerabilities and Countermeasures by Language] Overview of Security Vulnerabilities by Language

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] C/C++ Secure Coding (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 7. [Security Vulnerabilities and Countermeasures by Language] Secure Coding in C and C++

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Java Secure Coding (Scheduled to be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 8. [Security Vulnerabilities and Countermeasures by Language] Java Secure Coding

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Python Secure Coding (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 9. [Security Vulnerabilities and Countermeasures by Language] Python Secure Coding

<1st Edition> [Web Application Security] Web Application Security Overview (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 10. [Web Application Security] Application Security Overview

<1st Edition> [Web Application Security] Cross-Site Scripting (XSS) (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 11. [Web Application Security] Cross-Site Scripting (XSS)

<1st Edition> [Web Application Security] Cross-Site Request Forgery (CSRF) (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 12. [Web Application Security] Cross-Site Request Forgery (CSRF)

<1st Edition> [Web Application Security] Security Headers and HTTPS (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 13. [Web Application Security] Security Headers and HTTPS

<1st Edition> [Authentication and Authorization] Basics of Authentication and Authorization (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 14. [Authentication and Authorization] Basics of Authentication and Authorization

<1st Edition> [Authentication and Authorization] Password Management (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 15. [Authentication and Authorization] Password Management

<1st Edition> [Authentication and Authorization] OAuth and JWT (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 16. [Authentication and Authorization] OAuth and JWT

<1st Edition> [Authentication and Authorization] Session Management (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 17. [Authentication and Authorization] Session Management

<1st Edition> [Practical Application and Analysis of Secure Coding] Code Review and Static Analysis Tools (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 18. [Practical Application and Analysis of Secure Coding] Code Review and Static Analysis Tools

<1st Edition> [Practical Application and Analysis of Secure Coding] Dynamic Analysis and Pentesting (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 19. [Practical Application and Analysis of Secure Coding] Dynamic Analysis and Pentesting

<2nd Edition> Section 20. [Web Application Security] SQL Injection and Injection Families

<2nd Edition> Section 21. [Access Control] Access Control Systems and Privilege Escalation Defense

<2nd Edition> Section 22. [Data Protection and Encryption] Symmetric/Asymmetric Encryption and Key Management

<2nd Edition> Section 23. [Supply Chain and Dependency Security] SCA·SBOM·Package Signing

<2nd Edition> Section 24. [API and Cloud Security] OWASP API Top 10·SSRF·Cloud Isolation

<2nd Edition> Section 25. [Observability·Auditing·Incident Response] A09 Logging·Monitoring·IR