Duration
3 days
Course Description
In this course, you will learn why it's critical to build security into your Android apps, how to improve programming processes to promote security, & how to provide countermeasures for the numerous threats to which a 'Droid app and its users are exposed.
Audience
This course is intended for a programmer or web developer who is experienced with mobile app development in Android and wants to learn how to develop secure apps that are hardened against attack to levels that are appropriate for the risk model of the app. The student has experience developing Android apps, and is familiar with the Android SDK, development tools, and processes.
Exam
ADR-001
Lesson 1: The Rationale for Android App Security
- Identify Why Security is Necessary
- Strengths and Weaknesses of the Android Security Architecture
Lesson 2: The Android Security Architecture
- Strengths and Weaknesses of the Android Security Architecture
- The Android Permissions Model
- Android Vulnerabilities
Lesson 3: Employing Secure Mobile App Development Strategies
- Follow App Security Best Practices
- Promote Security Throughout the Process
- Design for Security
- Write Secure Java Code
Lesson 4: Accessing Local Processes and Devices Securely
- Identify Threats to Access of Local Processes and Hardware
- Select Countermeasures to Local Process and Hardware Threats
- Implement Secure Access of Local Processes and Hardware
Lesson 5: Accessing Local Storage Securely
Identify Threats to Local Storage
Select Countermeasures to Local Storage Threats
Implement Secure Access of Local Storage
Lesson 6: Communicating over Networks Securely
- Identify Threats to Network Communication and Web Services
- Select Countermeasures to Network Communication Threats
- Implement Secure Network Communication
Lesson 7: Using the WebView Component Securely
- Identify Threats to the WebView Component
- Select Countermeasures to Secure the WebView Component
- Implement WebView Security
Lesson 8: Using the KeyChain Object Securely
- Identify Threats to the KeyChain Object
- Select Countermeasures to Secure the KeyChain Object
- Implement KeyChain Security
Lesson 9: Securing Data through Encryption
- Identify Threats to Plaintext Storage and Transmission
- Select Appropriate Encryption to Secure Data
- Implement Encryption
Lesson 10: Hardening Apps Against Attack
- Identify Threats Related to Reverse Engineering
- Select Reverse Engineering Countermeasures
- Harden an App
This is a version-specific reference outline. Confirm the current syllabus and delivery arrangements with EIEIO.