Modern computer systems are almost universally connected, which creates wider attack surfaces well beyond code to users, hardware, and more. Securing systems is thus a fundamental skill for modern software engineers.

This course is a comprehensive introduction to cyber security best practices. You’ll start with an overview of common threats and vulnerabilities, as well as high-level concepts like privilege, integrity, logging, and mediation. With these concepts in mind, you’ll then learn common protection mechanisms and defense strategies from endpoint protection to firewalls, gateways, and proxy servers. Next, you’ll learn monitoring and detection techniques, alerts, and event management. Finally, when you detect a threat, you’ll know how to respond with support tickets, data preservation, and change management.

By the end of this course, you’ll have a better understanding of modern cyber security practices and a clear roadmap to implementing these as a developer.

Cyber Security Best Practices for Developers

A security information and event management (SIEM) solution provides a few substantial benefits to an organization’s overall security.

## Centralized log file collection

An SIEM provides a centralized location to collect log files from disparate sources. Appliances and sensors like IPS, firewalls, internet proxies, databases, and servers can send events to an SIEM. SIEMs are flexible enough to receive events from almost anything that can generate and send information to a specified IP address and port. Connectors are established to provide the conduit between a logging source and the SIEM.
## Mining and correlating data

An SIEM is also a powerful tool for mining and correlating anywhere from thousands to trillions of bytes of data. This can be done automatically in real-time or as a background process. Alerts and dashboards can be generated based on rules provided by the vendor, or they can be developed by members of the security team.




A security information and event management (SIEM) solution provides a few substantial benefits to an organization’s overall security.

# Centralized log file collection

An SIEM provides a centralized location to collect log files from disparate sources. Appliances and sensors like IPS, firewalls, internet proxies, databases, and servers can send events to an SIEM. SIEMs are flexible enough to receive events from almost anything that can generate and send information to a specified IP address and port. Connectors are established to provide the conduit between a logging source and the SIEM.
# Mining and correlating data

An SIEM is also a powerful tool for mining and correlating anywhere from thousands to trillions of bytes of data. This can be done automatically in real-time or as a background process. Alerts and dashboards can be generated based on rules provided by the vendor, or they can be developed by members of the security team.




Learn about the various benefits of SIEM in IT security.


Security Information and Event Management (SIEM)

Learn about the various benefits of SIEM in IT security.

Introduction

Basics of Security

Detect

Protect

Respond

Conclusion

Security Information and Event Management

Centralized log file collection

Mining and correlating data