Modern computer systems are almost universally connected, which creates wider attack surfaces well beyond code to users, hardware, and more. Securing systems is thus a fundamental skill for modern software engineers.

This course is a comprehensive introduction to cyber security best practices. You’ll start with an overview of common threats and vulnerabilities, as well as high-level concepts like privilege, integrity, logging, and mediation. With these concepts in mind, you’ll then learn common protection mechanisms and defense strategies from endpoint protection to firewalls, gateways, and proxy servers. Next, you’ll learn monitoring and detection techniques, alerts, and event management. Finally, when you detect a threat, you’ll know how to respond with support tickets, data preservation, and change management.

By the end of this course, you’ll have a better understanding of modern cyber security practices and a clear roadmap to implementing these as a developer.

Cyber Security Best Practices for Developers

## Use proven security measures

The design itself is what provides the security, not the secrecy of the design. Publicly accepted encryption standards are an excellent example of open design. The details of these encryption algorithms are publicly available. Despite this, several publicly disclosed algorithms can provide excellent security when implemented correctly.

> **Note:** Open design exposes the algorithm to a rigorous evaluation by experts in the field. It also enables greater trust, as the community can ascertain that there are no hidden trapdoors in the design.


## Hide information

Even though obscurity itself shouldn’t be considered a complete solution, a security strategy should make the attacker’s job as difficult as possible. The cost of obtaining the objective should exceed its value.
 

# Use proven security measures

The design itself is what provides the security, not the secrecy of the design. Publicly accepted encryption standards are an excellent example of open design. The details of these encryption algorithms are publicly available. Despite this, several publicly disclosed algorithms can provide excellent security when implemented correctly.

> **Note:** Open design exposes the algorithm to a rigorous evaluation by experts in the field. It also enables greater trust, as the community can ascertain that there are no hidden trapdoors in the design.


# Hide information

Even though obscurity itself shouldn’t be considered a complete solution, a security strategy should make the attacker’s job as difficult as possible. The cost of obtaining the objective should exceed its value.
 

Learn the importance of using safety measures such as hiding or disguising information from potential security breaches.

Introduction

Basics of Security

Detect

Protect

Respond

Conclusion

Obscurity is Not Security

Use proven security measures

Hide information