کتاب صوتی Rust and Security Research: Investigating Emerging Security Threats

🎓 دوره آموزشی جامع

📚 اطلاعات دوره

عنوان دوره: دوره Rust and Security Research: Investigating Emerging Security Threats

موضوع کلی: برنامه نویسی

موضوع میانی: راست (Rust)

📋 سرفصل‌های دوره

• 1. Introduction to Rust for Security Research
• 2. Setting Up Your Rust Development Environment
• 3. Rust's Core Principles: Ownership, Borrowing, Lifetimes
• 4. Basic Syntax, Variables, and Data Types
• 5. Control Flow: Conditionals and Loops
• 6. Functions, Modules, and Crates
• 7. Structs, Enums, and Pattern Matching
• 8. Error Handling with Result and Option
• 9. Collections: Vec, HashMap, String
• 10. Traits and Generics for Reusable Code
• 11. Closures and Iterators
• 12. Smart Pointers (Box, Rc, Arc)
• 13. Concurrency in Rust: Threads and Message Passing
• 14. Asynchronous Programming with Async/Await
• 15. Macros: Declarative and Procedural
• 16. The Rust Build System: Cargo Advanced Features
• 17. Testing and Benchmarking Rust Code
• 18. Documentation and Code Quality in Rust
• 19. Performance Optimization Basics for Rust
• 20. `Unsafe` Rust: Understanding its Scope and Risks
• 21. Raw Pointers and `Unsafe` Blocks in Detail
• 22. Foreign Function Interface (FFI) with C
• 23. Interfacing with C++ Libraries (cxx crate)
• 24. Memory Layout and Data Representation
• 25. Stack vs. Heap Allocation in Rust
• 26. Operating System Primitives and Rust (syscalls)
• 27. File System Interaction and Permissions
• 28. Process Management and Inter-Process Communication
• 29. Networking Basics: Sockets and Protocols in Rust
• 30. Embedded Rust for Bare-Metal Development
• 31. Introduction to Assembly Language (x86-64)
• 32. Debugging Rust Binaries (GDB, LLDB)
• 33. Understanding Linkers and Loaders
• 34. ELF/PE File Format Analysis Basics
• 35. System Call Tracing (strace/dtrace equivalents)
• 36. Introduction to Cyber Security Research Methodologies
• 37. Threat Modeling and Risk Assessment
• 38. Common Vulnerability Classes (CWE, OWASP Top 10)
• 39. The MITRE ATT&CK Framework
• 40. Incident Response and Forensics Overview
• 41. Ethical Hacking and Responsible Disclosure
• 42. Setting Up a Secure Research Lab Environment
• 43. Version Control and Secure Development Practices
• 44. Introduction to Cryptography Fundamentals
• 45. Secure Random Number Generation
• 46. Rust's Memory Safety Guarantees vs. C/C++
• 47. Understanding Buffer Overflows (Stack and Heap)
• 48. Integer Overflows and Underflows
• 49. Use-After-Free Vulnerabilities
• 50. Double-Free and Other Heap Corruption Issues
• 51. Race Conditions and Concurrency Bugs
• 52. Format String Vulnerabilities
• 53. Return-Oriented Programming (ROP) Fundamentals
• 54. Practical ROP Chain Construction
• 55. Heap Exploitation Techniques
• 56. Kernel Exploitation Concepts
• 57. Memory Protection Mechanisms (ASLR, DEP/NX, Canaries)
• 58. Bypassing Modern Exploitation Mitigations
• 59. Secure Coding Practices in Rust to Prevent Exploits
• 60. Writing Safe Unsafe Rust Code
• 61. Raw Socket Programming and Packet Manipulation in Rust
• 62. Building Network Scanners and Probes with Rust
• 63. Implementing Network Proxies and Interceptors
• 64. Packet Capture and Analysis (pcap/nix crates)
• 65. DNS Security and Rust Implementations
• 66. Introduction to Web Application Security
• 67. Building Secure REST APIs with Rust Web Frameworks
• 68. Common Web Vulnerabilities and Rust Countermeasures (XSS, SQLi, CSRF)
• 69. Authentication and Authorization in Rust Web Apps
• 70. TLS/SSL Configuration and Best Practices in Rust
• 71. Symmetric Key Cryptography in Rust (AES, ChaCha20)
• 72. Asymmetric Key Cryptography in Rust (RSA, ECC)
• 73. Hashing Algorithms and Digital Signatures
• 74. Key Exchange Protocols (Diffie-Hellman, ECDH)
• 75. Public Key Infrastructure (PKI) and Certificates
• 76. Quantum-Resistant Cryptography Basics
• 77. Implementing Secure Protocols in Rust
• 78. Cryptographic API Misuse and Common Pitfalls
• 79. Introduction to Fuzzing for Vulnerability Discovery
• 80. Coverage-Guided Fuzzing with LibAFL and Rust
• 81. Writing Custom Fuzz Targets in Rust
• 82. Developing AFL-like Fuzzers in Rust
• 83. Static Analysis Tools for Rust (Clippy, Miri, custom linters)
• 84. Dynamic Analysis and Instrumentation Frameworks
• 85. Symbolic Execution and Concolic Testing Basics
• 86. Reverse Engineering Rust Binaries
• 87. Disassemblers and Decompilers for Rust
• 88. Automated Vulnerability Scanning and SAST/DAST for Rust
• 89. Developing Custom Security Tools and Utilities in Rust
• 90. Malware Analysis Fundamentals and Rust's Role
• 91. Supply Chain Security for Rust Projects (crates.io, dependency auditing)
• 92. Software Bill of Materials (SBOM) Generation for Rust
• 93. IoT Security Challenges and Rust Solutions
• 94. Firmware Analysis and Exploitation with Rust
• 95. Blockchain and Smart Contract Security with Rust
• 96. AI/ML Security: Attacks on Models and Defenses
• 97. Hardware-Assisted Security and TrustZone Integrations
• 98. Secure Enclaves and Confidential Computing with Rust
• 99. DevSecOps Principles and CI/CD for Rust Projects
• 100. The Future of Rust in Cybersecurity and Emerging Research Areas