Paper Info
Title
Developing a course module for teaching cryptography programming on Android
Abstract
Mobile platforms have become extremely popular among users and hence become an important platform for developers. Mobile devices often store tremendous amount of personal, financial and commercial data. Several studies have shown that large number of the mobile applications that use cryptography APIs have made mistakes. This could potentially attract both targeted and mass-scale attacks, which will cause great loss to the mobile users. Therefore, it is vitally important to provide education in secure mobile programming to students in computer science and other related disciplines. It is very hard to find pedagogical resources on this topic that many educators urgently need. This paper introduces a course module that teaches students how to develop secure Android applications by correctly using Android's cryptography APIs. This course module is targeted to two areas where programmers commonly make many mistakes: password based encryption and SSL certificate validation. The core of the module includes a real world sample Android program for students to secure by implementing cryptographic components correctly. The course module will use open-ended problem solving to let students freely explore the multiple options in securing the application. The course module includes a lecture slide on Android's Crypto library, its common misuses, and suggested good practices. Assessment materials will also be included in the course module. This course module could be used in mobile programming class or network security class. It could also be taught as a module in advanced programming class or used as a self-teaching tool for general public.
Year
DOI
Venue
2015
10.1109/FIE.2015.7344086
FIE
Keywords
Field
DocType
computer science,programming,Android programming,cryptography,security,course module,cryptography programming,SSL
World Wide Web,Android (operating system),Cryptography,Computer science,Network security,Encryption,Mobile device,Password,Mobile telephony,Class (computer programming)
Conference
ISSN
ISBN
Citations 
0190-5848
978-1-4799-8454-1
0
PageRank 
References 
Authors
0.34
3
2
Name
Order
Citations
PageRank
Jinsheng Xu173.22
Xiaohong Yuan216926.72