1. Developing Secure Mobile Applications for Android http://www.isecpartners.com/files/iSEC_Securing_Android_Apps.pdf CS 595 James Zachary Howland

2. Background Designed with security in mind Data sharing must be done explicitly Potentially harmful applications are limited by user Every application is its own user Applications are signed by developers Uses manifest to specify permissions

3. Intents and Pending Intents What are Intents? Bad Data and Intent Filters Callbacks should probably use PendingIntents

4. Activities Allow code reuse Intent Filter note Security concerns

5. Broadcasts Allows components to communicate Sensitive data Sticky Broadcasts

6. Services Secure calls into Services

7. Content Providers and File Access Permission Style Avoiding SQL Injection Nothing should be world-writable SD Card

8. Binders What are Binders? Security

9. Conclusion Android developed with security in mind Very specific methods for IPC Keep It Simple