Skip to content
CampusPrep
CY-702 (C) · Mobile Security and Forensics/Official Syllabus

Mobile Security and Forensics (CY-702 (C)) - Official Syllabus

1
Unit 1

Introduction to Mobile Forensics

  • Mobile forensics
  • Challenges in mobile forensics
  • The mobile phone evidence extraction
  • Documenting and reporting phase
  • Presentation phase
  • Archiving phase
  • Overview of mobile operating systems
  • Data acquisition methods
  • Examination and analysis of evidence stored on mobile phones
2
Unit 2

Android Forensics

  • Understanding Android, Android model
  • Android security- Secure kernel, Security-Enhanced Linux, Full Disk Encryption, Trusted Execution Environment
  • Android file system
  • Android Forensic Setup and Pre-Data Extraction Techniques
  • Android Data Extraction Techniques
  • Android Data Analysis and Recovery, Android data recovery
  • Android App Analysis, Malware, and Reverse Engineering: Analyzing Android apps
  • Reverse engineering. Android apps; extracting an APK file from an Android device; Android malware
3
Unit 3

iOS Forensics

  • Introducing iOS Application Security
  • Basics of iOS and application development, Developing your first iOS app
  • Running apps on iDevice
  • iOS MVC design
  • iOS security model, iOS secure boot chain, iOS application signing, iOS application
4
Unit 4

Android Security

  • Sandboxing and the permission model
  • Application signing
  • Android startup process
  • Setting up the development environment, Creating an Android virtual device
  • Useful utilities for Android Pentest, Android Debug Bridge, Burp Suite, APKTool
5
Unit 5

Traffic Analysis

  • Traffic Analysis for Android Devices, Android traffic interception
  • Ways to analyze Android traffic, Passive analysis, Active analysis
  • HTTPS Proxy interception

Laboratory Experiments

  • Setup of memory forensic environment and extract various artifacts from memory dump and analyze the memory dump, using different tools like Volatility, LiME, etc.
  • Windows artifact analysis using different forensic tools, which includes MRU, link file, USB analysis, Prefetch analysis, shell bag, web cache etc.
  • Using APKTool to reverse an Android application, Auditing Android applications.
  • Perform the following on different Android Image files: Using a custom recovery android image, Using AFLogical to extract contacts, calls, and text messages, Dumping application databases manually, Logging the logcat and using backup to extract an application's data.
  • Developing your first iOS app and running apps on iDevice.

Reference Books

  • Cyber Security — Nina Godbole — John Wiley
  • Digital Forensic — Nilakshi Jain — John Wiley
  • Learning Pentesting for Android Devices — Aditya Gupta — Packt Pub Ltd — Illustrated edition, 2014
  • Learning iOS Penetration Testing Paperback — Swaroop Yermalkar — Packt Publishing, 2004
  • Practical Mobile Forensics — Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty — Packt Publishing — Third Edition, 2018
  • Mobile Forensics Cookbook — Igor Mikhaylov, Oleg Skulkin — Packt Publishing Limited, 2017
Go to where you left off?

Quick Add to Notes

Save questions, your own notes and screenshots into notes filed by unit. It takes a free account.

Create free account

Have an account? Log in