Course Objectives

• Students learn cryptography basics (concepts, algorithms, techniques, implementation, and evaluation) for mobile apps.
• Students learn basic cryptography implementation for Android mobile security.
• Understand how to outsource application and data to a cloud in mobile computing which will leverage services provided by cloud providers.
• Deal with the various aspects arising in architecting secure complex systems, such as analysing and identifying system threats and vulnerabilities, and investigating operating systems security.

Course Outcomes

• COURSE OUTCOMES:  
  

  SNO	DESCRIPTION	PO MAPPING
  CO1	Understand the requirement of security and various issues at wireless and mobile network.	PO1, PO2, PO5, PO6, PO11, PO12
  CO2	Understand the threats on wireless mobile	PO1, PO2, PO4, PO5, PO11
  CO3	Develop The Understanding Of Relationship Between android and ios mobile security	PO1,PO2, PO5, PO6, PO7

Course Syllabus

MSCS2101-MOBILE SECURITY ANALYSIS

MODULE(I):                                                                                                        

Mobile Issues and Development Strategies–Physical Security–Strong authentication with poor keyboards–Safe browsing environment–Secure Operating Systems–Application Isolation–Virus, Worms,Trojans, Spyware and malware - Insecure Device drivers. 

MODULE (2)                                                                                                           

Android Security -Developing and debugging on android–Androids Se curable IPC mechanisms–Androids Security Model–Android Permissions Review–Content Providers–Mass storage - Android Security tools ioS Security- iOS security overview-pairing, back up, configuration, introducing app security, blocking access, key bags& key chains, Sand boxing, Encrypting Devices, Organizational controls. Mobile device Management.

MODULE (3)                                                                                                  

Vulnerabilities, Threats of Mobile Devices and Countermeasures- Understanding Attack vectors,Overview of various Mobile Malware, Network Attacks,Mobile malware defenses: Advantages and disadvantages, protect against Mobile Malware, protect against identity theft, protect against Mobile DoS(Denial of Service Attacks), Protect against Bluetooth attacks.

MODULE (4)                                                                                                           

Legal Issues and Courtroom Skills -Mobile Security Penetration Testing tools – Mobile platform attack tools and utilities – browser extensions– networking tools – Web application tools.Mobile malware – Important post malware –Threat Scenarios – mitigating mobile malware – For developers and platform vendors.

Session Plan

Session 1

Mobile Issues and Development Strategies:

SESSION-1(Mobile Issues)

Session 2

Physical Security:

SESSION-2(Physical Security)

Session 3

Strong authentication with poor keyboards:

sm-3

Session 4

Safe browsing environment:

SM-4

Session 5

Secure Operating Systems:

SM-5A

Session 6

Application Isolation–Virus, Worms,Trojans:

SM-6

Session 7

Spyware and malware:

SM-7

Session 8

Insecure Device drivers:

SM-8A

Session 9

Android Security -Developing and debugging on android:

SM-9

Session 10

Androids Securable  IPC mechanisms–Androids Security Model:

SM-10A

Session 11

Android Permissions Review,Content Providers,Mass storage:

SM-11

Session 12

Android Security tools.ioS Security- ioS security overview:

SM-12A

Session 13

ioS security overview-pairing, back up, configuration:

SM-13A

Session 14

Introducing app security, blocking access, key bags & key-chains:

SM-14

Session 15

Sand boxing, Encrypting Devices:

SM-15

Session 16

Organizational controls, Mobile device Management:

SM-16

Session 17

Vulnerabilities:

SM-17A

Session 18

Threats of Mobile Devices and Countermeasures:

SM-18

Session 19

Understanding Attack vectors:

SM-19

Session 20

Network Attacks:

SM-20

Session 21

Mobile malware defenses, Advantages and disadvantages:

SM-21

Session 22

protect against Mobile Malware:

SM-22A

Session 23

protect against identity theft, protect against Mobile DoS:

SM-23

Session 24

Protect against Bluetooth attacks:

SM-24

Session 25

Legal Issues and Courtroom Skills:

SM-25

Session 26

Mobile Security Penetration Testing tools:

sm-26a

Session 27

 Mobile platform attack tools and utilities:

sm-27c

Session 28

Browser extensions, networking tools:

SM-28B

Session 29

Web application tools,Mobile malware,Important post malware:

SM-29

Session 30

Threat Scenarios , mitigating mobile malware ,For developers and platform vendors

SM-30

experiment-1

Study various methods for tapping into the wire-

Experimen1(MSA)

https://youtu.be/jiyNRSj-UFE

experiment-2

Study the steps for installing Wire shark , The packet sniffing tool for performing network analysis

Experimen2(MSA)

https://youtu.be/Hl0IpoS503A

experiment-3

Study of working with captured packets-

Experimen3(MSA)

https://youtu.be/k6rx1krSUAo

experiment-4

Study of advanced Wire shark features-

EXPERIMENT4(MSA)

Experiment4.1(MSA)

https://youtu.be/e_dsGhvq9CU

experiment-5

Study of security packet analysis-

EXPERIMENT5(MSA)

https://youtu.be/visrNiKIP3E

experiment-6

Study of Operating System Finger printing-

Experiment 6(MSA)

\https://youtu.be/9Jt_DqUGQI0