Platform Security Courses

Symbian offer two complementary one-day courses, usually timetabled back to back, but allowing individuals to book on either or both as appropriate to their role in their organisation. These are:

A design workshop (“Designing for Platform Security Course ”);

A hands-on programming class (“Programming for Platform Security Course ”).

Symbian wishes to emphasise the importance of design and encourages ISVs to attend both courses. Members of larger teams who have a clear split between design roles and implementation roles may select to attend one day instead of both days.

Both these courses are described below. Multiple course discounts apply for booking on both Platform Security courses.

Symbian OS: Designing for Platform Security

Language :	C++
Level :	Intermediate
Upcoming Dates & Locations : (next six months)	22/05/2008 (1 day) - Bangalore, India : £1200 29/05/2008 (1 day) - Bangalore, India : £1200 05/06/2008 (1 day) - London, United Kingdom : £1200 13/08/2008 (1 day) - Bangalore, India : £1200

Course Outline

This is an interactive workshop aimed at developers/architects already experienced in Symbian OS but who want to know what is changing in the latest versions of the OS (post 8.1) with respect to the implementation of Platform Security. It covers the following areas: platform security concepts and activities that developers need to be aware of during a project’s analysis phase and design phase.

Objective

The purpose of the this one-day course is to help ensure that phones built on Symbian OS v9.1 and onwards are designed and implemented following secure OS principles.
The objective for the course is to help developers redesign insecure architectures and spot security problems. The emphasis is on the design aspects, rather more than the analysis or coding aspects. Symbian nevertheless encourages any designer who will also do any coding to attend the complementary one-day “Programming for Platform Security Course”.
Upon completing this Workshop, participants will be able to:

Explain to team colleagues why information security is important to phone users and network operators;
Explain to team colleagues key architectural concepts and goals of Platform Security and be able to apply this to analyzing the design of their own software.

Audience

People who want just a design overview:

Internal Symbian technical consultants/architects;
Staff with a similar design role in Symbian OS Licensee companies;
Staff with a similar design role in Symbian Partner companies;
3rd party software developers who want an overview of the changes with a view to implementation.

The focus of the workshop is on the overall phone platforms rather than being aimed at developers of any one category of software.
Any software developer who combines both a design and implementation role is strongly encouraged to attend this course before attending the “Programming for Platform Security course”.

Pre-requisites

The Workshop is designed for new Symbian OS developers who have a moderate understanding of OO and C++ in particular. No familiarity with an IDE is required since there are no programming exercises.

The workshop attendee should be familiar with the operating principles and organisation of Symbian OS to a level provided by training covered in the Symbian OS Essentials and Application Engines courses. Details of these courses are available on request.

Style

The workshop consists of approximately 30% interactive sessions and 70% lectures.

Course Content

Module 1. Introduction to the course

Explains the setting and requirement for the course and its content.

Module 2. Designing-out insecurity

This module looks at what’s involved in redesigning insecure architectures. This module emphasizes the importance of design. The attendee has to be committed to thinking about design problems, rather than being process-driven and thinking purely in terms of implementing APIs.

Unit 2.1 Identify Security Counter-measures

You will be able to select security counter-measures. Topics covered include:

dentifying threats: explain to others why information security is important to phone users and network operators
Doing a cost/benefit analysis of counter-measures

Unit 2.2 Understand Platform Security

You will be able to explain to others key architectural concepts and goals of Platform Security. Topics covered include:

Platform Security concepts – the unit of trust
Data Caging
Capabilities

Module 3. Sign your Software

You will be able to describe the need for Symbian Signed. Topics covered include:

Describe the need for Symbian Signed
Describe how Symbian Signed handles capabilities
Overview of the certification process steps inc. developer certificates

Module 4 Secure your design

You will be able to secure your design and be able to apply this to analysing the design of own software. Topics covered include:

Protection Domains
Sharing Data
Securing the architecture of device drivers, servers and plug-ins
The design process
Connectivity issues

For further information, please contact Kay Ferris on 44 207 154 1846 or
technical.training@symbian.com

Further Information

If you require further information about this training course, please contact us via the details below:

Kay Ferris
Training Business Manager
Symbian Ltd
2 - 6 Boundary Row
London
SE1 8HP
UK
+44 20 7154 1846 technical.training@symbian.com