Skip to main content

​
Defensive Design

Auditoriya: dasturiy ta’minot muhandislari, IT
Murakkablik darajasi: Boshlang’ich
Davomiyligi: 8 ta modul, har biri 3–5 daqiqa + har bir modul uchun 5 ta savol
Mavjudligi: Training’da alohida modullar sifatida mavjud. Birgalikda tayinlanishi yoki ko’rilishi shart emas, mustaqil o’rganish uchun mo’ljallangan.
Modullar:
  • Defensive Design: Application Portfolio Management
  • Defensive Design: GRC (Governance, Risk, and Compliance) for Technical Employees
  • Defensive Design: Open Source Code
  • Defensive Design: OWASP
  • Defensive Design: Phishing for Technical Employees
  • Defensive Design: Social Engineering for Technical Employees
  • Defensive Design: Threat Modeling
  • Defensive Design: User Permissions & Access Management
Treyler: Treylerni ko’rish
Marketing materiallari: Defensive Design marketing to’plami
Asosiy o’quv tushunchalari:
  • Defensive Design: Application Portfolio Management
    • Kiberxavfsizlikda ilovalar portfelini boshqarishning ahamiyati
    • Inventarizatsiya qilingan ilovalar portfelining afzalliklari
    • Ilovalar portfelining mazmuni: biznes va texnik jihatlar
    • Falokatdan keyin tiklashni rejalashtirishdagi roli
    • Tashkilot salomatligini doimiy qo’llab-quvvatlash
  • Defensive Design: GRC (Governance, Risk, and Compliance) for Technical Employees
    • GRC ta’rifi
    • Talablarga muvofiqlikning ahamiyati
    • Aniq siyosatlarning roli
    • Risklarni proaktiv boshqarish
    • Risklarni muntazam baholash va tahlil qilish
    • GRC dasturini tushunish va unga rioya qilish
  • Defensive Design: Open Source Code
    • Ochiq manbali kodning keng tarqalganligi va afzalliklari
    • Ochiq manbali kod bilan bog’liq xavfsizlik risklari
    • Xavfsiz ochiq manbali kodni tanlash mezonlari
    • Yetarli bo’lmagan xavfsizlik amaliyotlaridan kelib chiqadigan tahdidlar
    • Ochiq manbali komponentlarni muntazam yangilashning ahamiyati
    • Software Bill of Materials (SBOM) hujjatini yuritish
    • Ochiq manbali koddan mas’uliyat bilan foydalanish
  • Defensive Design: OWASP
    • OWASP haqida umumiy ma’lumot va uning ahamiyati
    • OWASP vositalariga umumiy nazar
  • Defensive Design: Phishing for Technical Employees
    • Fishing hujumlarining maqsadli xususiyati
    • Business Email Compromise (BEC)
    • Ishga yollash bahonasidagi hiylalar — ish imkoniyatlari orqali fishing
    • Hamjamiyatga asoslangan hujumlar — forumlar, guruhlar va boshqalar
    • Hushyorlikning ahamiyati
    • Muloqotda tekshirish va ehtiyotkorlik
    • Xavf belgilari: shoshilinchlik hissi va boshqalar
  • Defensive Design: Social Engineering for Technical Employees
    • Maqsadli ijtimoiy muhandislik hujumlari
    • Parol xavfsizligi
    • Open Source Intelligence (OSINT) risklari
    • Sohaviy tadbirlardagi jismoniy xavfsizlik tahdidlari
    • Tashkilot siyosatlariga rioya qilish
    • Hushyor va proaktiv xavfsizlik amaliyotlari
  • Defensive Design: Threat Modeling
    • Risklarni kamaytirishda tahdidlarni modellashtirishning ahamiyati
    • Tahdidlarni modellashtirishning asosiy komponentlari
      • Ilovalarni hujjatlashtirish
      • Potensial tahdidlarni aniqlash va ustuvorligini belgilash
      • Qarshi choralarni belgilash va joriy etish
    • Dasturiy ta’minotni ishlab chiqish hayotiy siklga integratsiya qilish
    • Doimiy takomillashtirish va ta’lim
  • Defensive Design: User Permissions & Access Management
    • Foydalanuvchi ruxsatlarini boshqarishning ahamiyati
    • Foydalanuvchi ruxsatlarini boshqarishning tashkiliy usullari
    • Huquqlar kengayishining oldini olish
    • Minimal huquqlar va imtiyozli kirish
    • Ko’rinuvchanlik va nazoratni saqlab qolish
    • Talablarga muvofiqlik, me’yoriy hujjatlar va muntazam audit
    • Samarali kirish boshqaruvining ta’siri