Intro to Secure Coding and Input Validation in Android

Overview

This course on Secure Coding in Android Mobile App Development is designed for mobile app developers at a beginner to intermediate level. Participants will understand the necessity of secure coding practices in mobile app development and identify common vulnerabilities and defenses. The course will explore the Android security architecture and controls, as well as Kotlin's security features specifically for Android development. Additionally, learners will gain insights into best practices for Android development security, analyze a vulnerable Kotlin Android app to identify security flaws, and implement effective input validation and sanitization techniques to protect their applications from attacks such as SQL injection and cross-site scripting. By the end of the course, participants will be equipped with the knowledge to validate input forms and evaluate the effectiveness of various input validation techniques in real-world scenarios.

Syllabus

Introduction to Secure Coding

This module introduces the importance of secure coding in mobile app development. It covers common security mistakes, mobile app vulnerabilities, and Android security architecture. Learners will explore Kotlin's security features and Android development security best practices. The module concludes with an examination of a deliberately vulnerable Kotlin Android app.

Input Validation

This module focuses on implementing input validation as a fundamental security mechanism. It covers risks associated with untrusted data, input sanitization techniques, and defenses against SQL injection, cross-site scripting, and cross-app scripting. Learners will also explore null safety, string interpolation, and form validation in Kotlin.