Virtual Laboratory and Curriculum Development for Secure Mobile Computing

德克萨斯大学达拉斯分校(UTD)的“安全移动计算虚拟实验室和课程开发”项目将开发一套移动系统安全方面的课程和虚拟实验室，重点是保护智能手机。将开发的课程将包括使用现有工具或开发新工具进行Android污点分析、对应用程序(App)进行可扩展的Android安全威胁分析以及智能手机取证等主题。为了支持这些课程，将开发一个虚拟实验室，使学生能够试验安全的移动计算。该实验室将通过基于网络的界面提供，使来自全国各地的用户能够全天候访问资源。参加课程和相关虚拟实验室的学生将能够解决和缓解银行、军事行动、医疗保健和执法等敏感领域的安全担忧，在这些领域，针对移动设备的恶意软件的风险越来越高。这个项目将为学生提供机会，通过广泛的实验室练习进行课程作业，并参加智能手机安全编程比赛。项目评价将由两名外部评估员监督。将根据学生和虚拟实验室用户的反馈进行评价。学生在校期间、毕业时和毕业后第二年每月都会接受调查。这将使评价小组能够确定将作为该项目的结果而开发的工具的效力。这项工作的成果将在期刊和会议上发表，如ACM TISSEC、IEEE tDSC、IEEE S和P、ACM CCS、NDSS和USENIX Security。虚拟实验室将被纳入安全竞赛，这将有助于将这项工作的采用范围进一步扩大到主办机构之外。

The "Virtual Laboratory and Curriculum Development for Secure Mobile Computing" project at the University of Texas at Dallas (UTD) will develop a set of courses and a virtual laboratory in mobile system security with an emphasis on securing smart phones. The courses that will be developed will include topics such as Android taint analysis using existing tools or development of new tools, scalable Android security threat analysis on applications (apps), and smart phone forensics. To support the courses a virtual laboratory will be developed that will allow students to experiment with secure mobile computing. The laboratory will be available via a web-based interface will allow users, from around the country, to access the resource on a 24/7 basis. Students that participate in the courses and the associated virtual laboratory will be in a position to address and mitigate security concerns in in sensitive domains such as banking, military operations, healthcare, and law enforcement, where there is a rising danger associated with malware targeted at mobile devices. This project will provide opportunities for students to carry out coursework with extensive laboratory exercises and to participate in programming competitions in smart phone security. Project evaluation will be overseen by two external evaluators. Evaluation will be based on feedback obtained from students and users of the virtual laboratory. Students will be surveyed while they are in school, at graduation, and on a monthly basis the year after they have graduated. This will allow the evaluation team to determine the efficacy of the tools that will be developed as a result of this project. Results of this work will be published in journals and at conferences such as ACM TISSEC, IEEE TDSC, IEEE S&P, ACM CCS, NDSS and USENIX Security. The virtual laboratory will be incorporated in security competitions that will help to further spread the adoption of this work beyond that of the host institution.