Logo image
Plugin-Based Tool for Teaching Secure Mobile Application Development

Plugin-Based Tool for Teaching Secure Mobile Application Development

Hossain Shahriar, Chi Zhang, Maria Valero, Sweta Sneha, A. B. M. Kamrul Riad, Md Saiful Islam Sheikh Ahamed
Information systems education journal, Vol.19(2), pp.25-34
04/2021
1
mobile devices Secure software Development SQL injection Static analysis secure coding data flow Cybersecurity Internet of Things Software Engineering
Mobile device security has become increasingly important in mobile computing. Since the mobile devices and applications are growing rapidly, the security threats are intensified due to mobile app flaws and lack of security consideration in early stages of software development. The unsecure software development process creates a serious weak path that causes potential malicious attacks in mobile devices. To mitigate the mobile threats, it is essential for application developers to follow secure code development processes to alleviate data leakage or access control vulnerabilities. Secure Mobile Software Development needs to be emphasized and adopted for reducing security vulnerabilities. In this paper we present a development tool of secure code analysis for mobile application development. The tool is designed to find the security leakage of static code and implementation of plugins such as Droid Patrol. The proposed code analysis and design procedure in the early stage of application development can eliminate the weak security path in coding. Our experience of running the plugin in classrooms are discussed and student feedback are provided. [This paper was selected for inclusion in the journal as an EDSIGCON 2020 Meritorious Paper.]
Logo image