This course is designed for intermediate-level learners who want to enhance their security skills in Android development. Participants will analyze the structure of Android memory and evaluate its defenses against exploitation, including understanding pointers and their role in buffer overflow exploits. The course covers various types of overflows, mitigation techniques, and specific vulnerabilities such as the Stagefright buffer overflow.
In addition to exploitation techniques, learners will explore secure data storage practices within the Android file system, implement cryptography concepts, and securely manage credentials using the Android Keystore. The course also addresses password security through hashing and salting techniques, common data risks, and secure storage practices to protect data at rest. Finally, participants will gain insights into network security, data protection in transit, and securing inter-process communications and webviews in Android applications.
In this module, you'll dive into the intricacies of Android memory management. We'll explore how memory is structured and used in Android apps, and you'll learn to identify and mitigate common vulnerabilities like overflows. By the end, you'll have hands-on experience with the notorious Stagefright buffer overflow vulnerability, equipping you with practical skills to protect your apps.
涵盖的内容
4个视频1个作业
显示有关单元内容的信息
4个视频•总计46分钟
Android memory overview•12分钟
Understanding overflows, part 1•14分钟
Understanding overflows, part 2•10分钟
Activity: Exploiting Stagefright•11分钟
1个作业•总计30分钟
Memory corruption quiz•30分钟
Encryption
第 2 单元•小时 后完成
单元详情
This module will guide you through the essentials of encryption in Android development. You'll learn how to protect user data at every stage—whether it's at rest, in transit, or in use. We'll cover common pitfalls in handling user credentials and how to avoid them, ensuring your app's data remains secure. By the end, you'll be adept at using Android Keystore for secure credential storage.
涵盖的内容
15个视频1个作业
显示有关单元内容的信息
15个视频•总计149分钟
Android storage overview•9分钟
Protecting secrets•13分钟
Activity: Insecurely saving a username and password•10分钟
Encryption overview•12分钟
Understanding PKI•10分钟
Android encryption overview•14分钟
Activity: Encrypting data, part 1•14分钟
Activity: Encrypting data, part 2•11分钟
Activity: Encrypting data, part 3•13分钟
Hashing•8分钟
Activity: Hashing a password •9分钟
Activity: Generating random values•4分钟
Activity: Salting a hashed password •3分钟
Android Keystore •6分钟
Activity: Storing secrets in Android Keystore•12分钟
1个作业•总计30分钟
Encryption quiz•30分钟
Protecting Data
第 3 单元•小时 后完成
单元详情
In this module, you'll explore various strategies to protect data beyond encryption. We'll discuss common data risks and how to secure data during transmission and storage. You'll also learn to mitigate data leakage risks and secure inter-process communications within Android apps. By the end, you'll have a comprehensive understanding of how to protect data viewed online by users.
涵盖的内容
30个视频1个作业
显示有关单元内容的信息
30个视频•总计313分钟
Common data risks•11分钟
Android file recovery•8分钟
Data in transit•12分钟
Activity: Sniffing cleartext transmissions, part 1•10分钟
Activity: Sniffing cleartext transmissions, part 2•10分钟
Network security •6分钟
Activity: Configuring network security, part 1•15分钟
Activity: Configuring network security, part 2 •14分钟
Certificate pinning•10分钟
Activity: Implementing certificate pinning•10分钟
Data leakage, part 1•9分钟
Data leakage, part 2•9分钟
Activity: Preventing data leakage•3分钟
Databases•15分钟
Activity: Working with Room database, part 1 •13分钟
Activity: Working with Room database, part 2•6分钟
Activity: Securing database data•7分钟
Android IPC, part 1•5分钟
Android IPC, part 2: Activity•10分钟
Android IPC, part 3: Service•15分钟
Android IPC, Part 4: Broadcast receiver•11分钟
Android IPC, Part 4: Broadcast receiver (cont'd)•12分钟
Android IPC, Part 5: Content provider•21分钟
Android IPC, Part 5: Content provider (cont'd)•9分钟
Infosec believes knowledge is power when fighting cybercrime. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and privacy training to stay cyber-safe at work and home. Learn more at infosecinstitute.com.
When will I have access to the lectures and assignments?
To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
What will I get if I subscribe to this Specialization?
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.
Is financial aid available?
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.