Smartphone Security and Forensics

 

Smartphone Security and Forensics

Date:

7-11 Dec 2015

Registration deadline:

26 Oct 2015

 

Location:

Tallinn, Estonia

Number of participants:

16

Participation fee:

300€ (no fee for Sponsoring Nations)

The course provides IT-specialists an introduction to smartphone security and forensics as well as a good technical overview of challenges and solutions in countering threats from mobile devices

We will focus mainly on Android and iOS mobile device platforms and it is built upon hands-on exercises. Practical part provides usage of open-source or non-commercial tools during the mobile phone analysis. 

The aim of the course is to explain security issues which mobile phones bring to the organization. Understanding how attackers exploit devices helps to find the way how to secure them. 

  • Provide an overview of the mobile platform internals
  • Introduce security features of the mobile platforms
  • Understand signs and symptoms of mobile malware infection
  • See and do mobile malware static analysis
  • Understand how attackers exploit mobile phone weaknesses
  • Learn to recognize weaknesses in mobile applications
  • Conduct mobile device penetration test
  • Understand mobile phone forensic process
  • Explain different types of smartphone acquisition
  • Understand how to preserve mobile phone as an evidence
  • Understand SIM card security, do SIM card data analysis
  • See and do SD card acquisition
  • See and do Android mobile phone forensic analysis
  • See and do iPhone forensic analysis

Target Audience
Technical IT Staff, working in the IT area in roles like administrator, auditor, etc., whose normal duties do NOT include smartphone security or smartphone analysis and and the managers of IT security staff, who want to get an understanding about what mobile device security is about and capable of.

Prerequisites

  • Basic understanding of computing and mobile phone platforms;
  • Good work experience in the Linux and Windows environments, especially command line;
  • Comfortable with using virtual machines for training environment (Virtual Box or similar).
  • English language skill comparable to STANAG 6001, 2.2.2.2. is required.
Registration info

To register for the course, please download the Joining Report and send the filled report to events -at ccdcoe.org