Course

Syllabus

ibrary Exploitation. OWASP Mobile Top 10. Mobile Security Assessment: Component Analysis, Frida, HTTP Interception, SSL Unpinning and Traffic Analysis, Automated Static and Dynamic Assessment. Attacks and Vulnerabilities in Real World Android Apps (A Case Study): XSS, Task Hijacking, Code Injection, Overlay Attacks, Insecure Deep Links, Malware Analysis and ML-based Detection, App Store Security and Supply Chain Attacks, Privacy Violation, System Call Hardening, ASLR, ROP, Framework Exploits. Fuzzing for Mobile Applications. Advanced Mobile Malware and Spyware Analysis. iOS app development, Xcode, Application Security: App Store, IPA Decryption and Analysis.

Prerequisite

26CY605: Secure Coding, 26CY682: Cyber Security lab

Course Outcome

CO-PO Mapping

1. Y. Karim, Embedded Android, Vol. 1, O’Reilly Media, 2013.
2. E. Nikolay, Android Security Internals: An In-Depth Guide to Android’s Security Architecture, No Starch Press, 2014.
3. Dominic Chell, Tyrone Erasmus, Shaun Colley, and Ollie Whitehouse, The Mobile Application Hackers Handbook, Wiley, 2015.
4. Thiel, D. (2016). iOS Application Security. No Starch Press.