Android Security Essentials

Descripción

Este es un curso profesional de dos días (12 horas) que proporciona los conocimientos a fondo del modelado de la seguridad y tanto el desarrollo como el punto de vista del usuario final en Android.

Objetivos

Con este curso aprenderás...

• Entender la arquitectura de software Android
• Entender el modelo de seguridad en Android
• Diseñar aplicaciones Android teniendo en cuenta hábitos de securización
• Construir aplicaciones más seguras y robustas como reclamo para el cliente

Contenidos del curso

Permissions

• Introduction
• Android Platform Architecture
• Android Security Architecture
  • Application signing
  • Installing applications
• Permissions
  • Why Permissions
  • Enforcing permissions
• Levels of Protection
  • Normal Permissions or Level - Zero Permissions
  • Dangerous Permissions or Level - one Permissions
  • Signature Permission or Level - two Permissions
  • Signature and System Permissions or Level - three Permissions
• Application Level Permissions
  • Adding system permissions required by an application
  • Declaring permissions required by other applications
• Component level Permissions
  • Activity
  • Service
  • Content Providers
  • Broadcast Intents
• Extending Android Permissions
  • Adding a new permission
  • Creating a permission group
  • Creating a permission tree
• Lab 1: Securing Applications Using Permission
  • Create an application to use Permission
  • Create permission and access it

Managing the Policy File

• Introduction
• The Manifest File
  • Attributes of Manifest Tag
  • Attributes of Application Tag
• Modifying Application Policy
  • Applications running with the same Linux ID
  • Setting application permissions
  • Permissions for external applications
  • External storage
  • Debugging Mode
  • Backup
• Lab 2: Defining the Application’s Policy File
  • Creating two applications with the same Linux ID....
  • Backing up Data on Cloud Storage
  • Debugging the Application
  • Moving application to the Internal Memory of the Device

User Data Privacy and Protection

• Introduction
• Data security principles
  • Confidentiality
  • Integrity
  • Availability
  • The mobile environment.
  • Data states
• Vulnerabilities and Attacks against Stored Data
  • Vulnerabilities of Stored Data
  • Threats to Stored Data
• Protection Principles
• Digital rights management
  • ips for Android Coding Vulnerabilities
• Lab 3: Data Confidentiality and Protection
  • Lab 3.1: Ensuring Data Confidentiality
  • Lab 3.2 : Protecting Application Data with Permissions.

Securing Storage

• Introduction
• Data storage decisions
  • Privacy
  • Data storage period
• Storage Mechanisms
• Shared preferences
  • Creating a preference file
  • Writing preference
  • Preference Activity
• File
  • Creating a file
  • Writing to a file
  • Reading from a file
  • File operations on an external storage
• Cache
  • Reading preference
• Database
• Lab 4: Data Storage Applications
  • Using Shared Preferences
  • File Storage Operations
  • Storing data in Cache
  • SQLite Database Storage
  • Retrieve Gmail Account Info Using Account Manager

Para más detalles o resolución de dudas puedes contactar con Core Networks a través del mail sales@corenetworks.es