ANDROID SECURITY ESSENTIALS        v 5.0

ase_logo_buton

Предварителни изисквания:

Обучаващите се да са преминали трейнинг за Android Application Development (AND-401) или да имат еквивалентни знания.

Lesson 1 Permissions
Introduction
Android Platform Architecture
Android Security Architecture
Application signing
Installing applications
Permissions
Why Permissions
Enforcing permissions
Levels of Protection
Normal Permissions or Level Zero Permissions
Dangerous Permissions or Level one Permissions.
Signature Permission or Level two Permissions
Signature and System Permissions or Level three Permissions
Application Level Permissions
Adding system permissions required by an application
Declaring permissions required by other applications
Component level Permissions
Activity
Service
Content Providers
Broadcast Intents
Extending Android Permissions
Adding a new permission
Creating a permission group
Creating a permission tree

Lab 1: Securing Applications Using Permission
Create an application to use Permission
Create permission and access it

Lesson 2 Managing the Policy File
Introduction
The Manifest File
Attributes of Manifest Tag
Attributes of Application Tag
Modifying Application Policy
Applications running with the same Linux ID
Setting application permissions
Permissions for external applications.
External storage
Debugging Mode
Backup

Lab 2: Defining the Application’s Policy File
Creating two applications
with the same Linux ID
Backing up Data on Cloud Storage
Debugging the Application
Moving application to the Internal Memory of the Device

Lesson 3 User Data Privacy and Protection
Introduction
Data security principles
Confidentiality
Integrity
Availability
The mobile environment
Data states
Vulnerabilities and Attacks against Stored Data
Vulnerabilities of Stored Data
Threats to Stored Data
Protection Principles
Digital rights managementips for Android Coding Vulnerabilities

Lab 3: Data Confidentiality and Protection
Ensuring Data Confidentiality
Protecting Application Data with Permissions

Lesson 4 Securing Storage
Introduction
Data storage decisions
Privacy
Data storage period
Storage Mechanisms
Shared preferences
Creating a preference file
Writing preference
Preference Activity
File
Creating a file
Writing to a file
Reading from a file
File operations on an external storage
Cache
Reading preference
Database

Lab 4: Data Storage Applications
Using Shared Preferences
File Storage Operations
Storing data in Cache
SQLite Database Storage
Retrieve Gmail Account Info Using Account Manager