Application Security for the Android Platform

1. Introduction
-Application Security: Why You Should Care
-The Current State of Mobile Application Security on Android
-Security: Risk = Vulnerability + Threat + Consequences
-Evolution of Information Security: Why Applications Matter the Most
-Your Role: Protect the Data
-Secure Software Development Techniques
-Unique Characteristics of Android
-Moving On

2. Android Architecture
-Introduction to the Android Architecture
-The Linux Security Model
-The Resulting Android Security Model
-Application Signing, Attribution, and Attestation
-Process Design
-Android Filesystem Isolation
-Android Preferences and Database Isolation
-Moving up the Layers to System API and Component Permissions

3. Application Permissions
-Android Permission Basics
-Using Restricted System APIs and the User Experience
-Custom Permissions

4. Component Security and Permissions
-The Types of Android Components
-Intercomponent Signaling Using Intents
-Public and Private Components
-Imposing Restrictions on Access to Components
-Putting It All Together: Securing Communications in a Multi-Tier App

5. Protecting Stored Data
-The Threats and Vulnerabilities Against Stored Data
-Protection Principles
-Cryptography Primer: Encryption
-Cryptography Primer: Hashing
-Cryptographic Practicalities
-Key Derivation and Management
-Practical Cryptography: Applying a Technique Against a Threat

6. Securing Server Interactions
-Confidentiality and Authentication
-SSL/TLS: The Industry Standard
-Protecting Data En Route to Public Services
-Protecting Data En Route to Private Services
-Threats Against Devices Using Data in Transit
-Input Validation: The Central Tenant of Application Security
-Preventing Command Injection

7. Summary
-Key Themes
-Wrapping It Up