Checking date: 05/05/2025 08:09:23


Course: 2025/2026

Mobile device security
(19487)
Bachelor in Computer Science and Engineering (Study Plan 2022) (Plan: 489 - Estudio: 218)


Coordinating teacher: PERIS LOPEZ, PEDRO

Department assigned to the subject: Computer Science and Engineering Department

Type: Electives
ECTS Credits: 6.0 ECTS

Course:
Semester:




Requirements (Subjects that are assumed to be known)
Cryptography and Computer Security (course 3 / semester 1). Computer Networks (course 3 / semester 1). Security Engineering applied to computer engineering / to information systems (course 3 / semester 2).
Learning Outcomes
RA1.2: Knowledge and understanding of engineering disciplines underlying their specialisation, at a level necessary to achieve the other programme outcomes, including some awareness at their Forefront. RA2.2: Ability to identify, formulate and solve engineering problems in their field of study; to select and apply relevant methods from established analytical, computational and experimental methods; to recognise the importance of non-technical societal, health and safety, environmental, economic and industrial constraints. RA3.1: Ability to develop and design complex products (devices, artefacts, etc.), processes and systems in their field of study to meet established requirements, that can include an awareness of non-technical ¿ societal, health and safety, environmental, economic and industrial ¿ considerations; to select and apply relevant design methodologies. RA3.2: Ability to design using some awareness of the forefront of their engineer ing specialisation. RA4.2: Ability to consult and apply codes of practice and safety regulations in their field of study. RA6.1: Ability to gather and interpret relevant data and handle complexity within their field of study, to inform judgements that include reflection on relevant social and ethical issues. RA6.2: Ability to manage complex technical or professional activities or projects in their field of study, taking responsibility for decision making. RA7.1: Ability to communicate effectively information, ideas, problems and solutions with engineering community and society at large. RA7.2: Ability to function effectively in a national and international context, as an individual and as a member of a team and to cooperate effectively with engineers and non-engineers. RA8.1: Ability to recognise the need for and to engage in independent life-long learning. RA8.2: Ability to follow developments in science and tech. CB3: Students have the ability to gather and interpret relevant data (usually within their field of study) in order to make judgements which include reflection on relevant social, scientific or ethical issues. CB5: Students will have developed the learning skills necessary to undertake further study with a high degree of autonomy. CG2: Be able to generate new ideas (creativity), to anticipate new situations, to adapt to new situations, working in a team and interact with others, but at the same time be able to work autonomously. CG9: Efficiently use ICT resources to write technical reports and project and work reports on computing, as well as quality presentations. CGB4: Basic knowledge of the use and programming of computers, operating systems, databases and computer programmes with applications in engineering. CGB5: Knowledge of the structure, organisation, operation and interconnection of computer systems, the fundamentals of their programming, and their application to the resolution of engineering problems. CGO3: Ability to design, develop, evaluate and ensure the accessibility, ergonomics, usability and security of computer systems, services and applications, as well as the information they manage. CGO6: Ability to conceive and develop centralised or distributed computer systems or architectures integrating hardware, software and networks in accordance with the knowledge acquired. CGO8: Knowledge of basic subjects and technologies, which enable them to learn and develop new methods and technologies, as well as those which provide them with great versatility to adapt to new situations. CGO9: Ability to solve problems with initiative, decision-making, autonomy and creativity. Ability to know how to communicate and convey the knowledge, skills and abilities of the profession of Technical Engineer in Computer Science. CECRI10: Knowledge of the characteristics, functionalities and structure of Operating Systems and design and implement applications based on their services. CECRI11: Knowledge and application of the characteristics, functionalities and struc- ture of Distributed Systems, Computer Networks and Internet and design and implement applications based on them. CECRI18: Knowledge of the principles and regulations of computer science at national, European and international levels. CTE7: Ability to design and implement system and communications software. CTE16: Ability to understand, apply and manage the warrant and security of computer systems.
Description of contents: programme
1. Mobile computing security overview. 2. Mobile infrastructure vulnerabilities. a. Vulnerabilities b. Mitigation techniques 3. Mobile communication vulnerabilities. a. Vulnerabilities b. Mitigation techniques 4. Mobile device vulnerabilities. a. Vulnerabilities b. Mitigation techniques 5. Mobile platform vulnerabilities. a. Vulnerabilities b. Mitigation techniques 6. Mobile application vulnerabilities. a. Vulnerabilities b. Mitigation techniques
Learning activities and methodology
AF1. THEORETICAL-PRACTICAL CLASSES. 1.5 ECTS with full attendance. They will present the knowledge that students should acquire. They will receive the class notes and will have basic reference documents to facilitate the follow-up of the classes and the development of the subsequent work. Exercises and problems that students may have, will be solved and workshops and evaluation tests will be carried out to develope the necessary skills. AF2. TUTORIALS. 0.25 ECTS with full attendance. Individualized (individual tutorials) or group (collective tutorials) assistance to students will be provided by the teacher. AF3. INDIVIDUAL OR GROUP STUDENT WORK. 3.75 ECTS with 0% attendance AF8: WORKSHOPS AND LABORATORIES 0.25 ECTS with full attendance AF9: FINAL EXAM. 0.25 ECTS with full attendance. In which the knowledge, skills and abilities acquired throughout the course will be assessed globally. MD1: CLASS THEORY. Exhibitions in the teacher's class with support of computer and audiovisual media, in which the main concepts of the subject are developed and materials and bibliography are provided to complement the students' learning. MD2: PRACTICES. Resolution of practical cases, problems, etc. raised by the teacher individually or in groups. MD3: TUTORIALS. Individualized assistance (individual tutorials) or group (collective tutorials) to students by the teacher. MD6: LABORATORY PRACTICES. Applied / experimental teaching to workshops and laboratories under the supervision of a tutor.
Assessment System
  • % end-of-term-examination/test 30
  • % of continuous assessment (assigments, laboratory, practicals...) 70

Calendar of Continuous assessment


Extraordinary call: regulations
Basic Bibliography
  • Androulidakis, I. . Mobile Phone Security and Forensics: A Practical Approach. . Springer. 2022
  • Bergman, N., Stanfield, M., Rouse, J., Scambray, J., et al. . Hacking Exposed Mobile: Security Secrets & Solutions. . McGraw Hill Osbourne Media: New York, NY. 2013
  • Buttyan, L. and Hubaux, J.. Security and Cooperation in Wireless Networks: Thwarting Malicious and Selfish Behavior in the Age of Ubiquitous Computing. . Cambridge University Press. 2007
Recursos electrónicosElectronic Resources *
Additional Bibliography
  • Jeff Six. Application Security for the Android Platform. O'Really Media, Inc. 2011
  • Johnny Cache, Joshua Wright, Vincent Liu.. Hacking wireless exposed: wireless security secrets and solutions.. McGraw-Hill. 2010
  • Pragati Ogal Rai. Android Application Security Essentials. Packt Publishing. 2013
(*) Access to some electronic resources may be restricted to members of the university community and require validation through Campus Global. If you try to connect from outside of the University you will need to set up a VPN


The course syllabus may change due academic events or other reasons.