Sessions at AnDevCon II about Security

Monday 7th November 2011

• Secure Data and Data Synchronization

  by Lee S. Barney

  Android applications can easily store data using the SQLite database engine. This data can then be heavily used without delays when passing information back-and-forth between the device and a remote database. How then can data be kept in sync if it needs to exist on the device and a remote database? What if you don't need all of the data found in the database to exist on the device?

  This class will show you how to securely store data on your device and use a simple and secure synchronization utility to send that data to any remote database management system. It could be Oracle, MySQL, Sybase, or some other database. It could even be something completely different, such as XML or other textual flat files.

  • Databases
  • Security

  At 11:30am to 12:45pm, Monday 7th November

Tuesday 8th November 2011

• Deep Dive Into Android Security

  by Aleksandar Gargenta

  With Android activations reaching a million devices per day, it is no surprise that security threats against our favorite mobile platform have been on the rise.

  In this session, you will learn all about Android's security model, including application isolation (sandboxing) and provenance (signing), its permission system and enforcement, data protection features and encryption, as well as enterprise device administration.

  Together, we will dig into Android's own internals to see how its security model is applied through the entire Android stack - from the Linux kernel, to the native layers, to the Application Framework services, and to the applications themselves.

  Finally, you’ll learn about some of the weaknesses in the Android's model (including rooting, tap-jacking, malware, social-engineering) as well as what can be done to mitigate those threats, such as SE-Linux, memory protection, anti-malware, firewall, and developer best practices.

  By the end of this session you will have a better understanding of what it takes to make Android a more trusted component of our personal and professional lives.

  • Android
  • Security

  At 8:30am to 9:45am, Tuesday 8th November

  Coverage slide deck