Project Details

Vulnerability Research on Mobile Devices (Project)

Duration: 2-4 Months, > 4 Months

Internship Type: Undergraduate, Pre-University

Project Overview/Background

• Mobile applications and operating systems have become more complex, which leads to bugs in the code. Some of these bugs cause minor instability of the software. However, some bugs could be exploited and lead to the compromise of the mobile device.

• This project aims to research techniques to discover vulnerabilities in mobile applications and operating systems, assess their impact and develop ways to mitigate them.

Scope & Deliverables

• Research into a publicly reported vulnerability on Android or iOS.

• Assess the impact of the vulnerability and develop a proof-of-concept to demonstrate the impact.

• Assess existing mitigations against the vulnerability.

• Assess if similar vulnerabilities may remain in the mobile software or similar software.

• Develop mitigations against the vulnerability or similar vulnerabilities.

Prerequisites/Skills Required

• Strong interest in mobile device security
• Experienced in C/C++ programming and mobile application development
• Basic understanding of reverse engineering, ARM assembly language and software vulnerabilities (e.g. basic buffer overflows, etc.) is highly recommended
• Applicant should indicate preference for Android or iOS (if any)

Application