When you enroll in this course, you'll also be enrolled in this Specialization.
Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate
There are 3 modules in this course
This course is designed for intermediate-level learners who want to enhance their security skills in Android development. Participants will analyze the structure of Android memory and evaluate its defenses against exploitation, including understanding pointers and their role in buffer overflow exploits. The course covers various types of overflows, mitigation techniques, and specific vulnerabilities such as the Stagefright buffer overflow.
In addition to exploitation techniques, learners will explore secure data storage practices within the Android file system, implement cryptography concepts, and securely manage credentials using the Android Keystore. The course also addresses password security through hashing and salting techniques, common data risks, and secure storage practices to protect data at rest. Finally, participants will gain insights into network security, data protection in transit, and securing inter-process communications and webviews in Android applications.
In this module, you'll dive into the intricacies of Android memory management. We'll explore how memory is structured and used in Android apps, and you'll learn to identify and mitigate common vulnerabilities like overflows. By the end, you'll have hands-on experience with the notorious Stagefright buffer overflow vulnerability, equipping you with practical skills to protect your apps.
What's included
4 videos1 assignment
Show info about module content
4 videos•Total 46 minutes
Android memory overview•12 minutes
Understanding overflows, part 1•14 minutes
Understanding overflows, part 2•10 minutes
Activity: Exploiting Stagefright•11 minutes
1 assignment•Total 30 minutes
Memory corruption quiz•30 minutes
Encryption
Module 2•3 hours to complete
Module details
This module will guide you through the essentials of encryption in Android development. You'll learn how to protect user data at every stage—whether it's at rest, in transit, or in use. We'll cover common pitfalls in handling user credentials and how to avoid them, ensuring your app's data remains secure. By the end, you'll be adept at using Android Keystore for secure credential storage.
What's included
15 videos1 assignment
Show info about module content
15 videos•Total 149 minutes
Android storage overview•9 minutes
Protecting secrets•13 minutes
Activity: Insecurely saving a username and password•10 minutes
Encryption overview•12 minutes
Understanding PKI•10 minutes
Android encryption overview•14 minutes
Activity: Encrypting data, part 1•14 minutes
Activity: Encrypting data, part 2•11 minutes
Activity: Encrypting data, part 3•13 minutes
Hashing•8 minutes
Activity: Hashing a password •9 minutes
Activity: Generating random values•4 minutes
Activity: Salting a hashed password •3 minutes
Android Keystore •6 minutes
Activity: Storing secrets in Android Keystore•12 minutes
1 assignment•Total 30 minutes
Encryption quiz•30 minutes
Protecting Data
Module 3•6 hours to complete
Module details
In this module, you'll explore various strategies to protect data beyond encryption. We'll discuss common data risks and how to secure data during transmission and storage. You'll also learn to mitigate data leakage risks and secure inter-process communications within Android apps. By the end, you'll have a comprehensive understanding of how to protect data viewed online by users.
What's included
30 videos1 assignment
Show info about module content
30 videos•Total 313 minutes
Common data risks•11 minutes
Android file recovery•8 minutes
Data in transit•12 minutes
Activity: Sniffing cleartext transmissions, part 1•10 minutes
Activity: Sniffing cleartext transmissions, part 2•10 minutes
Network security •6 minutes
Activity: Configuring network security, part 1•15 minutes
Activity: Configuring network security, part 2 •14 minutes
Infosec believes knowledge is power when fighting cybercrime. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and privacy training to stay cyber-safe at work and home. Learn more at infosecinstitute.com.
When will I have access to the lectures and assignments?
To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
What will I get if I subscribe to this Specialization?
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.
Is financial aid available?
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.