Virtual Laboratory and Curriculum Development for Secure Mobile Computing

德克萨斯大学达拉斯分校（UTD）的“安全移动计算虚拟实验室和课程开发”项目将开发一套移动系统安全课程和一个虚拟实验室，重点是保护智能手机。将开发的课程将包括诸如使用现有工具或开发新工具的Android污染分析，应用程序（应用程序）上可扩展的Android安全威胁分析和智能手机取证等主题。为了支持这些课程，将开发一个虚拟实验室，让学生实验安全的移动计算。该实验室将通过基于网络的界面提供，将允许来自全国各地的用户全天候访问资源。参加课程和相关虚拟实验室的学生将能够解决和减轻银行、军事行动、医疗保健和执法等敏感领域的安全问题，这些领域与针对移动设备的恶意软件相关的危险正在上升。这个项目将为学生提供机会，通过广泛的实验室练习来完成课程作业，并参加智能手机安全方面的编程竞赛。项目评价将由两名外部评价人员监督。评估将基于从学生和虚拟实验室用户那里获得的反馈。学生将在在校期间、毕业时以及毕业后的一年内接受每月一次的调查。这将允许评估小组确定将作为这个项目的结果而开发的工具的功效。这项工作的结果将在ACM TISSEC、IEEE TDSC、IEEE s&p；P、ACM CCS、NDSS和USENIX Security等期刊和会议上发表。虚拟实验室将被纳入安全竞赛，这将有助于进一步将这项工作推广到主办机构之外。

The "Virtual Laboratory and Curriculum Development for Secure Mobile Computing" project at the University of Texas at Dallas (UTD) will develop a set of courses and a virtual laboratory in mobile system security with an emphasis on securing smart phones. The courses that will be developed will include topics such as Android taint analysis using existing tools or development of new tools, scalable Android security threat analysis on applications (apps), and smart phone forensics. To support the courses a virtual laboratory will be developed that will allow students to experiment with secure mobile computing. The laboratory will be available via a web-based interface will allow users, from around the country, to access the resource on a 24/7 basis. Students that participate in the courses and the associated virtual laboratory will be in a position to address and mitigate security concerns in in sensitive domains such as banking, military operations, healthcare, and law enforcement, where there is a rising danger associated with malware targeted at mobile devices. This project will provide opportunities for students to carry out coursework with extensive laboratory exercises and to participate in programming competitions in smart phone security. Project evaluation will be overseen by two external evaluators. Evaluation will be based on feedback obtained from students and users of the virtual laboratory. Students will be surveyed while they are in school, at graduation, and on a monthly basis the year after they have graduated. This will allow the evaluation team to determine the efficacy of the tools that will be developed as a result of this project. Results of this work will be published in journals and at conferences such as ACM TISSEC, IEEE TDSC, IEEE S&P, ACM CCS, NDSS and USENIX Security. The virtual laboratory will be incorporated in security competitions that will help to further spread the adoption of this work beyond that of the host institution.