HomeCoursesPractical Security: Simple Practices for Defending Your Systems

Updated 5 months ago

AI-powered learning

Save

Practical Security: Simple Practices for Defending Your Systems

Name: Practical Security: Simple Practices for Defending Your Systems
Price: 59 USD
Author: The Pragmatic Programmers

Learn about security techniques, e.g., patching, cryptography, and phishing prevention. Explore practices to make systems resistant to defend against attacks.

4.6

65 lessons

Created by The Pragmatic Programmers

Practical Security: Simple Practices for Defending Your Systems

What's included

65 lessons across 6 modules
40 quizzes with instant feedback
AI Tutor on every lesson

Join 3.1 million developers at

What You'll Learn

Implement rapid patching workflows with testing and phased rollouts to reduce exploit windows
Build and maintain third-party library inventories, including direct and transitive dependencies
Automate dependency vulnerability detection in builds using tools like Dependency-Check, Xray, and GitLab scans
Scan networks with Nmap and OpenVAS to inventory hosts, services, and exposed software versions
Apply layered defenses against SQL injection, XSS, and XSRF using safe query patterns and encoding/tokens
Select and use trusted crypto and password hashing (bcrypt/scrypt/Argon2/PBKDF2) and configure TLS securely
Deploy Windows and email defenses: WSUS, password policies/BitLocker, SPF/DKIM/DMARC, and 2FA against phishing

Learning Roadmap

65 Lessons40 Quizzes

Introduction

Get familiar with core security practices and essential tools for defending your systems.

Who Is This Course For?

What’s in This Course?

Patching

Unpack the core of efficient patching strategies to safeguard against software vulnerabilities.

Introduction

Upgrading Third-Party Libraries and Software

A Closer Look at Patching

Library Inventory

Dependency Management: Python

Dependency Management: JavaScript

Automating Vulnerability Detection

Finding Published Vulnerabilities

Testing Your Patches

If Patching Hurts, Do It More Often

Vulnerabilities

20 Lessons

Examine software vulnerabilities, SQL injection, defensive coding, XSS, XSRF, and mitigating misconfigurations.

Cryptography

15 Lessons

Grasp the fundamentals of using established cryptographic libraries and secure password management techniques.

Windows

6 Lessons

Solve problems in Windows security, from user account management to password policies, Active Directory, and BitLocker.

Phishing

8 Lessons

Focus on understanding phishing, its types, social and DNS-based defenses, and response strategies.

Certificate of Completion

Showcase your accomplishment by sharing your certificate of completion.

About this course

WHY I WROTE THIS COURSE

It seems like hardly a week goes by without a high-profile computer breach. Why do these happen? How can you prevent them? This course doesn’t have all the answers, but it does outline practices that make life harder for attackers and that will help tide you over until you get a full-time security team in place. In this course, you will learn 5 simple, yet effective, techniques for preventing attackers from getting into your system. These techniques are related to: patching, software vulnerabilities, cryptography, windows security, and phishing. Within each chapter you will learn the best practices for preventing vulnerabilities and how to make them more detectable. This course is based on the Pragmatic Programmers’ book, Practical Security, and is aimed at developers, admins, team leads, architects, technology generalists, and all others who stand guard against the things that disrupt the network.

ABOUT THE AUTHOR

The Pragmatic Programmers

We create timely, practical books and learning resources on classic and cutting-edge topics to help you practice your craft and accelerate your career.

Learn more about The

Trusted by 3.1 million developers working at companies

These are high-quality courses. Trust me the price is worth it for the content quality. Educative came at the right time in my career. I'm understanding topics better than with any book or online video tutorial I've done. Truly made for developers. Thanks

Anthony Walker

@_webarchitect_

Just finished my first full #ML course: Machine learning for Software Engineers from Educative, Inc. ... Highly recommend!

Evan Dunbar

ML Engineer

You guys are the gold standard of crash-courses... Narrow enough that it doesn't need years of study or a full blown book to get the gist, but broad enough that an afternoon of Googling doesn't cut it.

Software Developer

Carlos Matias La Borde

I spend my days and nights on Educative. It is indispensable. It is such a unique and reader-friendly site

Souvik Kundu

Front-end Developer

Your courses are simply awesome, the depth they go into and the breadth of coverage is so good that I don't have to refer to 10 different websites looking for interview topics and content.

Vinay Krishnaiah

Software Developer

Course

Password Security: How not to Store Passwords

Learn to avoid common password security mistakes like plaintext storage and weak hashing. Understand risks, fixes, and build secure, trusted login systems for your web apps.

1 h

intermediate

Course

A Guide to Securing Node.js Applications

Gain insights into securing Node.js applications: sanitize inputs, use HTTPS, encryption, explore authentication, access control, and protect against XSS, CSRF, and popular hacks.

4 h

intermediate

Course

Web Application Security for the Everyday Software Engineer

Gain insights into enforcing web app security best practices, such as HTTPS, defending against XSS and clickjacking, managing HTTP cookies, and warding off DDoS attacks.

4 h

intermediate

Course

Web Security and Access Management: JWT, OAuth2 & OpenId Connect

Gain insights into JWT, OAuth2, and OpenID Connect. Learn about HTTPS, encryption, and handshake techniques, and explore foundational concepts in web API security for enhanced application protection.

5 h

intermediate

Course

Web Security and Access Management: JWT, OAuth2 & OpenId Connect

Gain insights into JWT, OAuth2, and OpenID Connect. Learn about HTTPS, encryption, and handshake techniques, and explore foundational concepts in web API security for enhanced application protection.

5 h

intermediate

Course

Web Application Security for the Everyday Software Engineer

Gain insights into enforcing web app security best practices, such as HTTPS, defending against XSS and clickjacking, managing HTTP cookies, and warding off DDoS attacks.

4 h

intermediate

Course

A Guide to Securing Node.js Applications

Gain insights into securing Node.js applications: sanitize inputs, use HTTPS, encryption, explore authentication, access control, and protect against XSS, CSRF, and popular hacks.

4 h

intermediate

Course

Password Security: How not to Store Passwords

Learn to avoid common password security mistakes like plaintext storage and weak hashing. Understand risks, fixes, and build secure, trusted login systems for your web apps.

1 h

intermediate

Course

Password Security: How not to Store Passwords

intermediate

1 hour

Course

A Guide to Securing Node.js Applications

intermediate

4 hour

Course

Web Application Security for the Everyday Software Engineer