Virtual Laboratory and Curriculum Development for Secure Mobile Computing

德克萨斯大学达拉斯分校的“安全移动的计算虚拟实验室和课程开发”项目将开发一套移动的系统安全课程和虚拟实验室，重点是保护智能手机。 将开发的课程将包括使用现有工具或开发新工具进行Android污点分析，应用程序（应用程序）的可扩展Android安全威胁分析以及智能手机取证等主题。为了支持这些课程，将开发一个虚拟实验室，让学生们能够试验安全的移动的计算。 该实验室将通过一个基于网络的界面提供，将允许来自全国各地的用户每周7天、每天24小时访问资源。 参加课程和相关虚拟实验室的学生将能够解决和减轻银行、军事行动、医疗保健和执法等敏感领域的安全问题，这些领域与针对移动的设备的恶意软件相关的危险不断增加。 该项目将为学生提供机会，通过广泛的实验室练习开展课程作业，并参加智能手机安全方面的编程竞赛。 项目评价将由两名外部评价员监督。 评估将基于从学生和虚拟实验室用户获得的反馈。 学生将在在校期间、毕业时以及毕业后的一年每月接受调查。 这将使评估团队能够确定本项目将开发的工具的有效性。 这项工作的结果将发表在期刊和会议上，如ACM TISSEC，IEEE TDSC，IEEE S P，ACM CCS，NDSS和USENIX Security。 该虚拟实验室将被纳入安全竞赛，这将有助于进一步将这项工作的采用范围扩大到东道机构之外。

The "Virtual Laboratory and Curriculum Development for Secure Mobile Computing" project at the University of Texas at Dallas (UTD) will develop a set of courses and a virtual laboratory in mobile system security with an emphasis on securing smart phones. The courses that will be developed will include topics such as Android taint analysis using existing tools or development of new tools, scalable Android security threat analysis on applications (apps), and smart phone forensics. To support the courses a virtual laboratory will be developed that will allow students to experiment with secure mobile computing. The laboratory will be available via a web-based interface will allow users, from around the country, to access the resource on a 24/7 basis. Students that participate in the courses and the associated virtual laboratory will be in a position to address and mitigate security concerns in in sensitive domains such as banking, military operations, healthcare, and law enforcement, where there is a rising danger associated with malware targeted at mobile devices. This project will provide opportunities for students to carry out coursework with extensive laboratory exercises and to participate in programming competitions in smart phone security. Project evaluation will be overseen by two external evaluators. Evaluation will be based on feedback obtained from students and users of the virtual laboratory. Students will be surveyed while they are in school, at graduation, and on a monthly basis the year after they have graduated. This will allow the evaluation team to determine the efficacy of the tools that will be developed as a result of this project. Results of this work will be published in journals and at conferences such as ACM TISSEC, IEEE TDSC, IEEE S&P, ACM CCS, NDSS and USENIX Security. The virtual laboratory will be incorporated in security competitions that will help to further spread the adoption of this work beyond that of the host institution.