TAILIEUCHUNG - Lecture notes on Computer and network security: Lecture 32 - Avinash Kak

Lecture 32, security vulnerabilities of mobile devices. The learning objectives for this chapter include: What makes mobile devices less vulnerable to malware (to the extent that is the case) and Android’s “Verify Apps” security scanner, protection provided by sandboxing the apps, security (or lack thereof) provided by over-the-air encryption for cellular communications with a Python implementation of A5/1 cipher,. | Lecture 32: Security Vulnerabilities of Mobile Devices Lecture Notes on “Computer and Network Security” by Avi Kak (kak@) April 19, 2016 11:58pm c 2016 Avinash Kak, Purdue University Goals: • What makes mobile devices less vulnerable to malware (to the extent that is the case) and Android’s “Verify Apps” security scanner • Protection provided by sandboxing the apps • Security (or lack thereof) provided by over-the-air encryption for cellular communications with a Python implementation of A5/1 cipher • Side-channel attacks on specialized mobile devices • Examples of side-channel attacks: fault injection attacks and timing attacks • Python scripts for demonstrating fault injection and timing attacks • USB devices as a source of deadly malware • Mobile IP CONTENTS Section Title Page Malware and Mobile Devices 3 The Good News is . 9 Android’s “Verify Apps” Security Scanner 12 Sandboxing the Apps 14 What About the Security of Over-the-Air Communications with Mobile Devices? 30 Python Implementation of A5/1 Cipher 37 Side-Channel Attacks on Specialized Mobile Devices 44 Fault Injection Attacks 47 Demonstration of Fault Injection with a Python script Timing Attacks 54 59 A Python Script That Demonstrates How To Use Code Execution Time for Mounting a Timing Attack 67 USB Memory Sticks as a Source of Deadly Malware 82 Mobile IP 89 2 Computer and Network Security by Avi Kak Lecture 32 : MALWARE AND MOBILE DEVICES • Mobile devices — cellphones, smartphones, smartcards, tablets, navigational devices, memory sticks, etc., — have now permeated nearly all aspects of how we live on a day-to-day basis. While at one time their primary function was only communications, now they are used for just about everything: as cameras, as music players, as news readers, for checking on email, for obtaining information from the internet, for navigation, for .

• An ninh - Bảo mật
• Network security
• Lecture notes on Computer and network security
• Computer network
• Security vulnerabilities
• Mobile devices
• Fault injection attacks
• Web security
• security rules
• encryption techniques
• security techniques
• Security chat rooms
• especially
• Network Security Tools
• CCNA Security
• Lecture CCNA Security
• Modern Network Security Threats
• Evolution of Network Security
• Drivers for Network Security
• Network Perimeter
• Network Perimeter Security
• Network Security Principles
• Cryptography
• IDS Tools
• CGI attacks
• network intruders
• Managing Security
• Wireless
• Wireless Network Security
• attack techniques
• defensive techniques
• operating system security
• application security
• security policy
• Network Security Fundamentals
• Guide to Network Security Fundamentals
• Information security
• Define information security
• Information security careers
• Operational security
• Harden physical security
• Secure the physical environment
• Mobile device security
• Lecture Network security
• Computer hacking
• Internet security
• Network security model
• Securing the Network Infrastructure
• Network cable plant
• Secure removable media
• Network security hacks
• Ebook Network security hacks
• Network security technologies
• Unix host security
• Windows host security
• Wireless Security
• Advanced security
• Computer forensics
• Harden security
• Network Management Security
• Management Security
• security mechanisms
• security services
• security architecture
• encryption system
• Security principles
• Effective authentication methods
• Control access to computer systems
• Security Baselines
• Disable nonessential systems
• Harden operating systems
• Protect e mail systems
• World Wide Web vulnerabilities
• Security policy cycle
• Risk identification
• Security management
• Identity management
• Plan for change management
• CompTIA® Security+
• CompTIA Security+ certification
• Linux file manipulation tools
• Internal physical security controls
• Network hardware security modules