CompTIA Mobile App Security+ Android Exam ADR-001

Instructor led, group-paced, classroom-delivery learning model with structured hands-on activities.

This course is intended for a programmer or web developer who is experienced with mobile app development in Android and wants to learn how to develop secure apps that are hardened against attack to levels that are appropriate for the risk model of the app. The student has experience developing Android apps and is familiar with the Android SDK, development tools, and processes.

To ensure your success, you should have experience developing Android apps in Java using Eclipse and the Android SDK.

A general understanding of information technology security is also helpful, but not required.

Upon successful completion of this course, students will be able to:

• The Rationale for Android App Security
• The Android Security Architecture
• Employing Secure Mobile App Development Strategies
• Accessing Local Processes and Devices Securely
• Securing Data Through Encryption
• Accessing Local Storage Securely
• Communicating with Networks and Web Services Securely
• Using the WebView Component Securely
• Protecting Credentials in Storage and Transit
• Hardening Apps Against Attack

Lesson 1: The Rationale for Android App Security

Topic A: Identify the Need for Security
Topic B: Identify Security Requirements and Expectations
Topic C: Include Security in Your Development Processes
Topic D: Identify Your Approach to Risk Management

Lesson 2: The Android Security Architecture

Topic A: Strengths and Weaknesses of the Android Security Architecture
Topic B: The Android Permissions Model
Topic C: Android Vulnerabilities

Lesson 3: Employing Secure Mobile App Development Strategies

Topic A: Follow App Security Best Practices
Topic B: Design for Security
Topic C: Write Secure Java Code

Lesson 4: Accessing Local Processes and Devices Securely

Topic A: Select Countermeasures for Local Threats
Topic B: Implement Secure Access of Local Processes and Hardware

Lesson 5: Securing Data Through Encryption

Topic A: Select Countermeasures for Threats to Cleartext Data
Topic B: Implement Encryption

Lesson 6: Accessing Local Storage Securely

Topic A: Identify Countermeasures for Local Storage Threats
Topic B: Implement Secure Access of Local Storage

Lesson 7: Communicating with Networks and Web Services Securely

Topic A: Identify Countermeasures for Networking Threats
Topic B: Implement Secure Network Communication

Lesson 8: Using the WebView Component Securely

Topic A: Identify Countermeasures for WebView Component Threats
Topic B: Implement WebView Security

Lesson 9: Protecting Credentials in Storage and Transit

Topic A: Identify Countermeasures for Threats to Credentials
Topic B: Implement Secure User Authentication

Lesson 10: Hardening Apps Against Attack

Topic A: Identify Countermeasures for Reverse Engineering Threats
Topic B: Harden an App

Infero Training Ltd is based in the Lace Market in Nottingham. Training courses take place at the following locations including Nottingham, Derby, Loughborough, Mansfield, Chesterfield, Burton-on-Trent, Lincoln, Leicester, Sheffield, Stoke-on-Trent, Tamworth, Wolverhampton, Walsall, Birmingham, Solihul, Coventry, Nuneaton, Peterborough, Grantham.