Gain insights into cyber security fundamentals, explore common threats, discover protection mechanisms like firewalls, learn monitoring and response strategies, and develop secure systems as a developer.

Modern computer systems are almost universally connected, which creates wider attack surfaces well beyond code to users, hardware, and more. Securing systems is thus a fundamental skill for modern software engineers.

This course is a comprehensive introduction to cyber security best practices. You’ll start with an overview of common threats and vulnerabilities, as well as high-level concepts like privilege, integrity, logging, and mediation. With these concepts in mind, you’ll then learn common protection mechanisms and defense strategies from endpoint protection to firewalls, gateways, and proxy servers. Next, you’ll learn monitoring and detection techniques, alerts, and event management. Finally, when you detect a threat, you’ll know how to respond with support tickets, data preservation, and change management.

By the end of this course, you’ll have a better understanding of modern cyber security practices and a clear roadmap to implementing these as a developer.

Cyber Security Best Practices for Developers

**Logging** is the recording of activities performed by individuals and IT assets. 

## Definitions

For each logged event, the following table lists the minimum properties that should be recorded.




Properties of log events

align-center

Each log event should describe who did what, and when and how it was done.

                                                           
## Importance of logging

Logging gives an organization the ability to do the following:

- Monitor the actions of employees, systems, and software.
 

- Provide valuable insight that can be used to research activities, such as security events that are potential security incidents.

The news cycle regularly provides examples of successful attacks that include a prolonged presence on a network. This means malware and other compromises ran undetected. Ensuring that systems perform effective logging and capturing those events in an actively monitored centralized log repository, is key to detecting malicious activity like this.







**Logging** is the recording of activities performed by individuals and IT assets. 

# Definitions

For each logged event, the following table lists the minimum properties that should be recorded.




Each log event should describe who did what, and when and how it was done.

                                                           
# Importance of logging

Logging gives an organization the ability to do the following:

- Monitor the actions of employees, systems, and software.
 

- Provide valuable insight that can be used to research activities, such as security events that are potential security incidents.

The news cycle regularly provides examples of successful attacks that include a prolonged presence on a network. This means malware and other compromises ran undetected. Ensuring that systems perform effective logging and capturing those events in an actively monitored centralized log repository, is key to detecting malicious activity like this.







Learn about logging, its importance, and how to protect logged data.


Logging

Learn about logging, its importance, and how to protect logged data.

Term	Definition
Who	The source of the action, a user, system, or process.
What	A description of the action taken.
When	When the event took place, providing a timestamp that’s synchronized across systems.
Where	The object involved or acted upon to perform an action.

Introduction

Basics of Security

Detect

Protect

Respond

Conclusion

Logging

Definitions

Properties of log events