Android Malware Analysis and Security Course

• This course provides the necessary conceptual and practical knowledge for performing analysis in search of behaviours and possible vulnerabilities within Android applications.
• You will acquire basic practical skills for performing code analysis audits on Android APPs, using a recognized common methodology.
• With this course, you will gain the necessary knowledge on the standard methodology for performing code analysis audits of Android system applications at a professional level with their corresponding executive and technical reports.
• This course has a mainly hands-on approach, making it easy for the student to learn and apply the acquired knowledge.
• The course includes internationally recognized steps, standards and best practices to comply with.

1. General Concepts of Cybersecurity – Ethical Hacking

• Introduction to Cybersecurity – Ethical Hacking.
• The need for Cybersecurity in today’s world.
• Hacker terminology.
• Ethical hacking vs. vulnerability scanning.

2. General Cybersecurity in Smartphone

• Fundamentals of security.
• Access codes.
• Application signatures.

3. Cybersecurity in Android systems

• System architecture.
• Security in Android systems.
• OWASP top 10.

4. Laboratory preparation

• Analysis lab setup.
• Description of the tools.
• Other distributions.

5. Types of analysis and Android applications

• Types of analysis: static and dynamic.
• Types of malware on Android platforms.
• Applications to be analyzed.

6. Vulnerability analysis in Android applications

• Introduction and disclaimer.
• Static analysis of selected applications.
• Static and dynamic analysis of a banking APP.

7. Analysis of malware on Android

• Creation of a malicious apk.
• Analysis of the malicious application.
  1. Preliminary static analysis.
  2. Analysis of the apk package.
  3. Certificate analysis.
  4. Analysis of the source code.
  5. Final conclusion.

8. Final conclusions

9. Final exam and case study – JMSec Certificate of Completion

• Final theoretical exam.
• Case study analysis of an Android application.

X. Additional resources

• Android memory dump for further analysis.
• Characteristics, security and weaknesses of the NFC protocol.

The course will be imparted using the following elements:

• During the course the student will be given videos, documents in PDF format and other resources.
• The student will have to perform workshops and practical laboratories through the use of virtual machines duly configured and prepared for the course in question.
• The student will take a final test, as well as a practical test, in order to demonstrate the knowledge acquired throughout the course.

This course is also designed to be able to be taken offline using the different downloadable resources provided, so that each student can progress at their own pace.