Mobile Application Security

Mobile Application Security, 9780071633567 (0071633561), McGraw-Hill, 2010

Secure today's mobile devices and applications

Implement a systematic approach to security in your mobile application development with help from this practical guide. Featuring case studies, code examples, and best practices, Mobile Application Security details how to protect against vulnerabilities in the latest smartphone and PDA platforms. Maximize isolation, lockdown internal and removable storage, work with sandboxing and signing, and encrypt sensitive user information. Safeguards against viruses, worms, malware, and buffer overflow exploits are also covered in this comprehensive resource.

Design highly isolated, secure, and authenticated mobile applications
Use the Google Android emulator, debugger, and third-party security tools
Configure Apple iPhone APIs to prevent overflow and SQL injection attacks
Employ private and public key cryptography on Windows Mobile devices
Enforce fine-grained security policies using the BlackBerry Enterprise Server
Plug holes in Java Mobile Edition, SymbianOS, and WebOS applications
Test for XSS, CSRF, HTTP redirects, and phishing attacks on WAP/Mobile HTML applications
Identify and eliminate threats from Bluetooth, SMS, and GPS services

Himanshu Dwivedi is a co-founder of iSEC Partners (www.isecpartners.com), an information security firm specializing in application security. Chris Clark is a principal security consultant with iSEC Partners. David Thiel is a principal security consultant with iSEC Partners.

Comments

Amazing Books

Perl Pocket Reference

O'Reilly, 2011

The Perl Pocket Reference is a quick reference guide to Larry Wall's Perl programming language. It contains a concise description of all statements, functions, and variables, and lots of other useful information.

The purpose of the Pocket Reference is to aid users of Perl in ®nding the syntax of...

The Boundary Element Method with Programming: For Engineers and Scientists

Springer, 2008

This is a thorough, yet understandable text about the boundary element method (BEM), an attractive alternative to the finite element method (FEM). It not only explains the theory, but also deals with the implementation into computer code written in FORTRAN 95 (software can be freely downloaded). Applications range from potential problems to static...

Radio Antennas and Propagation: Radio Engineering Fundamentals

Newnes, 1998

This is the most modern, comprehensive and system-oriented text on radio engineering in print, by a pioneer in the field. Engineers and students need to use this book, which covers the physics of radio systems from a quantum mechanical point of view and offers a unique insight into radio engineering by showing not only how but why radio systems...

Frommer's Vancouver and Whistler Day by Day (Frommer's Day by Day - Pocket)

Frommers, 2012

Map your own adventure. Vancouver & Whistler Day by Day is the perfect answer for travelers who want to know the best places to visit and the best way to see the city.

Packed with color photos, this bestselling guide offers dozens of itineraries that show you how to see the best of Vancouver & Whistler in a...

Game Interface Design

Course Technology PTR, 2004

The interface is the heart and soul of a video game: it is the integral piece that allows a player to interact with the game. In order to create a great interface, you must carefully plan every detail. "Game Interface Design" helps you outline each step and define the goals for your interface. It covers the interface from the first image...

DHTML and JavaScript

Prentice Hall, 1999

DHTML & JavaScript offers plenty of instruction on using DHTML features as implemented in Netscape's Navigator 4+ browsers. This book contains a wealth of information about style sheets and other elements of Dynamic HTML; however, readers should be forewarned that there is no mention of Microsoft Internet Explorer compatibility...