MOBILE APPLICATION SECURITY TRAINING

Mobile App Security Training is about Mobile Applications and Device Security and it provides complete and current coverage of Mobile application and mobile platform security.

The course provides a solid foundation in basic mobile application security terminology and concepts, extended and built upon throughout the engagement. Attendees will examine various recognized attacks against mobile applications.

After taking the course the participant will learn to:

• Perform mobile application security, penetration, secure coding, mobile applications security testing, application penetration testing & ethical hacking.
• Manage security risks to mobile applications and devices.
• Identify potential flaws in developed and downloaded applications.
• Use Open Web Application Security Project (OWASP).

Learning Level: Intermediate

Duration: 3day(s)

Introduction to Mobile Security

• Introduction of Basic Security
• Identifying components of a mobile operating system (OS)
• Recognizing application security challenges
• Exposing the threats faced by mobile devices
• Discovering mobile hacking tools

Mobile App Security Concepts

• Security in mobile app development platforms
• Overview of iOS security architecture
• Overview of Android security architecture
• Overview of Windows Phone 7 security architecture
• Security features of iOS and Android
• Keychain Services
• Security APIs in iOS and Android
• Assets, threats, and attacks
• Security Technical
• Security Testing

Securing Mobile Applications

• Access Applications
• VPN and Secure Storage of Data
• Protection of Downloaded and Broadcasted Content
• Mobile DRM
• Service and Content Protection for Mobile Broadcast Services
• Security Requirements
• Authentication Applications
• Extensible Authentication Protocol (EAP)
• Generic Bootstrapping Architecture (GBA)
• Public Key Infrastructure (PKI) and Certificate-based Authentication
• Identity Selection Applications
• Security and Trust Model of Identity Selector
• Mobile Applications Security Feature Requirement Matrix Overview of the infrastructure within the mobile application
• Overview of Wireless Networks: Access and Core
• Overview of Mobile Development Platforms
• Mobile platforms security architecture
• SSL/TLS/DTLS configurations and weaknesses
• Google and Facebook hacking
• Hacking to Social Networks

Employing (OWASP) Open Web Application Security Project

• Revealing the top mobile risk
• Debugging a running app in an emulator
• Implementing mobile application security
• Protecting User interface data
• Enforcing user Authentication
• Standardizing permissions
• Promoting a secure environment creating the assessment plan
• Assessing device vulnerabilities