Project 3x: Security Audit of An Android App (20 pts. extra credit)
What You Need for This Project
- The Android security auditing environment you prepared in previous projects,
including Genymotion, Burp, adb, and the
Google Play Store
Choose any App you like to test, but not one
that I've used in homework projects. Perform these
three tests, and capture
three images showing whether these features are
secure or not:
- Network communications
- File storage
Write a few sentences, summarizing your results, like
Security Analysis of NFL App
Summary: No security problems were found.
A: Network communications used HTTPS for
all sensitive data.
B: File storage did not contain any sensitive data.
C: Logs did not disclose secrets.
The three images alone are worth 15 points.
The Security Analysis is worth 5 points.
Turning in your Project
Email the images and the Security Analysis to
to firstname.lastname@example.org with the subject line:
Proj 3x from YOUR NAME
Last modified 2-22-17