Lucebra
Lucebra Besigheid
IT en Sagteware/Netwerk en sekuriteit/Kuberveiligheid

Construirea de Sisteme Secure GenAI și AI Agentice

O cale de acces pas-cu-pas pentru implementarea unui program de securitate a aplicațiilor pe care echipele de dezvoltare îl folosesc efectiv, de la prima evaluare până la îmbunătățirea continuă.

Alle Vlakke • 30 Lesings • Lewenslange Toegang
Derek Fisher

Geverifieerde Meester Instrukteur

Construirea de Sisteme Secure GenAI și AI Agentice
SLEEPWA
Ontmoet jou instrukteur: Derek Fisher

19 ms

5.0 / 5.0
Globale gradering
1
Aktiewe studente
Engels (Verenigde State van Amerika)
99 Tale Onderskrifte
5 uur 29 min
Totale inhoud

Wat jy sal leer

Explicați de ce este importantă securitatea aplicațiilor pentru afacere și pentru inginerie
Evaluați postura dvs. actuală de securitate a aplicațiilor și efectuați o analiză a lacunelor asupra instrumentelor de securitate existente
Selectați și plasați instrumente de securitate de-a lungul ciclului de viață al dezvoltării
Utilizați modelarea amenințărilor și evaluarea riscului pentru a vă prioritiza munca

Kursusinhoud

4 afdelings • 30 lesings • 05:29:12 totale lengte

Course Introduction

01:03

Meet your instructor, Derek Fisher, and get an overview of the course: the current state of AI adoption, the security frameworks emerging for AI, and why AI security needs a different approach from traditional cybersecurity.

The State of AI Adoption

16:38

Look at the scale of AI investment and adoption, the main types of GenAI architectures, and why traditional security tools fall short when the attack is semantic rather than syntactic, including new gaps in the AI supply chain.

OWASP GenAI Security Project and LLMSecOps

07:06

An introduction to the OWASP GenAI Security Project, what it covers and who contributes to it, followed by a walk through the nine phases of the LLMSecOps framework used throughout the course.

NIST AI Risk Management Framework

03:06

An overview of the NIST AI Risk Management Framework and its risk-based approach, covering its main components: the Core, the Playbook, the Crosswalks and the Roadmap.

NIST AI RMF Core Functions

02:52

Understand the four core functions of the NIST AI RMF (Govern, Map, Measure and Manage) and how they work as a continuous cycle with governance at the center.

NIST AI RMF Playbook

11:36

Turn the NIST AI RMF into action with the Playbook's guidance for each function, from defining roles and building an AI inventory to measuring risk and safe decommissioning, and review the seven characteristics of trustworthy AI.

MITRE ATLAS

01:24

Get to know MITRE ATLAS, the ATT&CK-style knowledge base of adversary tactics, techniques, mitigations and case studies for AI and machine learning systems, and how it gives teams a common language for AI threats.

NIST Cybersecurity Framework Profile for AI

10:31

See how the NIST Cyber AI Profile extends the six CSF 2.0 functions with AI-specific considerations across its Secure, Defend and Thwart focus areas, so AI security builds on the program you already run.

Combining Frameworks

05:01

A whiteboard walkthrough of how the NIST AI RMF, the OWASP GenAI Security Project and MITRE ATLAS layer together, following one example from vulnerability to threat technique to managed risk.

EU and US AI Regulations

08:37

Survey the global AI regulatory landscape, including the EU AI Act's risk classification tiers, US federal direction and OMB requirements, and the growing patchwork of state AI laws.

Part 1 Quiz: Introduction to AI Security

20 questions on the AI security landscape, the OWASP GenAI Security Project and LLMSecOps, the NIST AI RMF and Cyber AI Profile, MITRE ATLAS, and EU and US AI regulation. Each answer includes an explanation.

TEST QUIZ - delete me

Part 2 Quiz: The AI Risk Landscape

20 questions on the AI risk taxonomy, the OWASP Top 10 for LLM and GenAI Applications, autonomous agentic AI, and the OWASP Top 10 for Agentic Applications. Each answer includes an explanation.

Part 3 Quiz: Governance and Compliance

20 questions on AI security governance, asset inventory and shadow AI, EU and US regulatory compliance, compliance mapping, model documentation and AI bills of materials. Each answer includes an explanation.

Weeklikse Studieplan
Beplan jou leerreis
KI skep n persoonlike skedule gebaseer op jou beskikbaarheid

Vereistes

O înțelegere de bază a modului în care software-ul este construit și livrat într-o organizație

Este folositor să aveți ceva experiență în analiză de afaceri sau management de proiect

Teikengehoor

Liderii de inginerie cărora li se cere să construiască un program de securitate a aplicațiilor de la zero

Dezvoltatorii de software și arhitecții care trebuie să integreze instrumente și procese de securitate

Scrum masteri, șefi de echipă și manageri de proiect care trebuie să planifice impactul securității asupra echipelor lor

Oor hierdie kursus

Securitatea aplicațiilor nu este un strat pe care îl fixezi la sfârșitul codului. Un program funcțional coordonează oameni, procese și instrumente de-a lungul întregii vieți a unui produs. Acest curs prezintă o cale de acces repetabilă pentru construirea unui astfel de program, indiferent dacă porniți de la zero sau maturăm ceea ce aveți deja.

Începem cu de ce contează securitatea aplicațiilor și cum să definiți problema în propria organizație. Apoi acoperim componentele unui program: instrumentele din întregul ciclu de viață al dezvoltării, modelarea amenințărilor și evaluarea riscului, analiza lacunelor în instrumentele dvs. actuale și construirea unei linii de producție DevSecOps. Veți vedea cum să rulați securitatea aplicațiilor ca un serviciu pentru echipele de dezvoltare, astfel încât securitatea să devină parte din munca zilnică, mai degrabă decât o poartă. Încheiem cu construirea unei căi de acces, măsurarea succesului și stabilirea programului pentru a continua să se îmbunătățească.

Cursul se bazează pe abordarea din cartea mea, The Application Security Program Handbook.

Loopbaangeleenthede & Teikenposte

Bou praktiese, werksgereed vaardighede en kwalifiseer vir gesogte poste wêreldwyd

Werkgereed Kurrikulum
Poste waarvoor jy kan aansoek doen

AI Solutions Engineer

Applied Generative AI Specialist

LLM & Prompt Architecture Consultant

AI Automation & Workflow Lead

Beraamde Jaarlikse Salaris
$105,000 – $165,000 / yr
Wêreldwye Bedryfsvraag

Fastest Growing Worldwide (#1)

Sleutelvaardighede wat jy Bemeester
Applied Generative AI Architecture
Model Fine-Tuning & Evaluation
Vector Databases & RAG Workflows
Autonomous AI Agent Orchestration
* Skatting gebaseer op globale tegnologie-werwingsmaatstawwe en salarisverslae.
Ontmoet jou instrukteur
Derek Fisher
5.0 Gradering
0 Studente
Bekyk volle profiel
Derek Fisher
Hoofinstrukteur
Cybersecurity Leader, Author, Educator, & Speaker
Derek Fisher has roughly 30 years of cybersecurity and engineering experience. Derek has worked in industries such as financial, healthcare, military, and commercial over his decades in hardware, software, and cybersecurity engineering. Derek is the author of several books including a children's book series on cybersecurity called Alicia Connected, and the Application Security Program Handbook. His SubStack and YouTube channel continue to contribute to the cybersecurity community. Derek serves as an advisor to Temple University's Cyber DIA program as well as an adjunct professor where he teaches software security to both graduate and undergraduate students. Derek is a regular speaker, panelist, and commentator on a wide range of topics, including product security, vulnerability management, threat modeling, DevSecOps, and cybersecurity career development. Derek is passionate about integrating cybersecurity at the grassroots level by finding partnerships, working with peers and lifting up the next generation of cybersecurity professionals....
Meer kursusse deur
Derek Fisher

Studente het ook gekoop

Leerders wat hierdie kursus bekyk het, het ook vir hierdie top-gegradeerde kursusse ingeskryf

Program ESP32 without Coding
GRATIS
IT en Sagteware | Hardeware

Program ESP32 Board without writing a single code in A Professional Environment

5.0
2 uur 30 min
18 lesings
Alles
GRATIS
Begin nou
Using Al to Code: Your Step-by-Step Guide
IT en Sagteware | Hardeware

Revolutionize Your Coding Skills with Al: A Comprehensive Guide for Beginners

5.0
2 uur
11 lesings
Alles
$10.99

$19.99

ISO 27001 Certification Process – A Step-by-Step Guide
IT en Sagteware | Inligting Sekuriteit

Master ISO 27001: Achieve Certification, Build Security, and Ensure Compliance for Your Organization

5.0
1 uur 30 min
10 lesings
Beginner
$39.99

$54.99

Implement GRC (Governance, Risk, Compliance) Step by Step
IT en Sagteware | Gesertifiseer in bestuur, risiko en nakoming (CGRC)

Master GRC: Step-by-Step Guide to Implementing Governance, Risk, and Compliance for Business Success

5.0
2 uur 30 min
35 lesings
Intermediêr
$39.99

$64.99

Mastering Arduino Data Streaming to Excel
IT en Sagteware | Arduino

Seamlessly Stream and Visualize Real-Time Data from Arduino into Excel with Ease

5.0
1 uur 30 min
6 lesings
Alles
$9.99

$34.99

Blogger: Make A Professional Website For Free With No Coding
IT en Sagteware | Ander IT & Sagteware

Learn how to create and customize a website with no prior coding experience.

5.0
1 uur 30 min
12 lesings
Alles
$9.99

$19.99

Frequently Bought Together

Learners who enrolled in this course also frequently purchased these complementary courses together.

7-Day Money Back Guarantee for all bundle items

Total price for selected items:

$91.98

$114.97

🎉 Save 20% when bought together

Gereelde Vrae

Vind antwoorde op die mees algemene vrae oor hierdie kursus.

Ja! Nadat u 100% van die kursuslesings en opdragte voltooi het, kan u onmiddellik u geverifieerde digitale Sertifikaat van Voltooiing direk vanaf u Lucebra-profiel aflaai.

Verken meer in Tegnologie

Brei jou leerreis uit met geakkrediteerde sertifikate, e-boeke en interaktiewe regstreekse klasse.