Mobile Security (SS 2024)

Course Number 705012 and 705013 | Sommersemester 2024

Content

This course is a seminar-style class which focuses on security aspects of mobile devices. We study the security mechanisms of smartphones and show how to employ them to protect sensitive information. Based on that, we analyze mobile applications regarding security-critical deficiencies, examine platform and application vulnerabilities and discuss how they can be exploited by attackers.

  • Security Architectures of Android and iOS
    • Access protection (PIN, Patterns, …), Secure Element, OS updates, permissions, sandboxing, …
    • Which mechanisms are provided in order to protect sensitive data?
    • How do they work?
  • Common security mistakes in mobile applications
    • Responsibilities of app developers
    • Proper use of access protection for files and data
    • Securing communication channels
  • Key and data storage on mobile devices
    • Device encryption, key derivation functions, key management, risks
    • Which kind of keys do you manage on your device?
    • In practice, what are the risks you have to cope with?
  • Application analysis
    • Tools and approaches, vulnerabilities and exploits, handling sensitive data, security-critical mistakes
  • Attacking today’s smartphones
    • Side-channels, Man-in-the-middle, jailbreaking, consequences
  • The bigger picture
    • What is the attack surface of the hardware?
    • How to conduct research in mobile security?

Material

Lecture Slides (Updated Weekly)

The lecture for Mobile Security enables you to acquire knowledge about trending topics in the field of Android and iOS. Attendance is not mandatory but you are encouraged to participate continuously in order to get the “big picture”. Slides will be uploaded and linked after each lecture.

Date Topic
15.03.2024 Introduction & Motivation
22.03.2024 Key & Data Storage on Mobile Devices, Assignment 1
12.04.2024 iOS Platform Security
Also see: iOS Security Guide
19.04.2024 iOS Application Security
Also see: Evasi0n Jailbreak: Userspace, Kernel Patches, Source Code
26.04.2024 Android Platform Security
Also see: The Android Platform Security Model
03.05.2024 Android Application Security I
17.05.2024 Android Application Security II
24.05.2024 Mobile Hardware Security
31.05.2024 Mobile Network Security
07.06.2024 Mobile Security Research, Q&A for Assignment 2
14.06.2024 Presentation of your task 2 results

Practicals and Misc

Everything related to the practicals and further material can be found on the assignments page.

Communication

For better coordination during the course, you are invited to join the # mobilesec Discord channel. To ensure that you won’t miss any essential information, there will also be old-school updates via email.

Administrative Information

Important Dates

  • 22.03.2024: Deadline to register for the lecture and the practicals class.
  • 12.04.2024: Assignments: Select a topic for task 2 and write me an e-mail
  • 19.04.2024: Assignments – Task 1: Submit your results as described on the slides for task 1.
  • 07.06.2024: Assignments – Task 2 : Deadline for sending the deliverable and slides via e-mail to mobilesec@iaik.tugraz.at
  • 14.06.2024: Assignments – Task 2 : Final presentations
  • June 2024: Lecture: Written exam

Lecture Exams

Basically, each student who wants to obtain a grade for the lecture has to pass an exam. You may select and register for an exam date via TUGRAZonline.

Lecture Dates

Date Begin End Location Event Type Comment
2024/03/01 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/03/08 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/03/08 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/03/15 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/03/15 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/03/22 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/03/22 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/04/12 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/04/12 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/04/19 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/04/19 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/04/26 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/04/26 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/05/03 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/05/03 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/05/17 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/05/17 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/05/24 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/05/24 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/05/31 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/05/31 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/06/07 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/06/07 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/06/14 10:00 12:00 Seminarraum Abhaltung VO fix/
2024/06/14 10:00 12:00 HS i12 "DynaTrace Hörsaal" Abhaltung VO fix/
2024/06/21 10:00 12:00 Seminarraum Abhaltung VO fix/

Lecturers

Florian Draschbacher
Florian
Draschbacher

PhD Student

View more