Platform Security Courses

Symbian offer two complementary one-day courses, usually timetabled back to back, but allowing individuals to book on either or both as appropriate to their role in their organisation. These are:

A design workshop (“Designing for Platform Security Course ”);

A hands-on programming class (“Programming for Platform Security Course ”).

Symbian wishes to emphasise the importance of design and encourages ISVs to attend both courses. Members of larger teams who have a clear split between design roles and implementation roles may select to attend one day instead of both days.

Both these courses are described below. Multiple course discounts apply for booking on both Platform Security courses.

Symbian OS: Programming for Platform Security

Language :	C++
Level :	Intermediate
Upcoming Dates & Locations : (next six months)	23/05/2008 (1 day) - Bangalore, India : £1200 30/05/2008 (1 day) - Bangalore, India : £1200 06/06/2008 (1 day) - London, United Kingdom : £1200 14/08/2008 (1 day) - Bangalore, India : £1200

Course Outline

This is a hands-on one-day class aimed at programmers already experienced in Symbian OS but who want to know what has changed in the latest versions of the OS (post 8.1) with respect to the implementation of Platform Security. It covers the following areas: recap of platform security key concepts and how to build and write software using the new APIs.

Objective

The purpose this one-day course is to help ensure that phones built on Symbian OS v9.1 and onwards are implemented following secure OS principles.
The objective for the course is to help developers write secure code. The emphasis is on the hands-on aspects, rather than the design aspects. Symbian nevertheless strongly encourages developers who have any design role to attend the complementary course “Designing for Platform Security Course”.
Upon completing this course, participants will be able to:

Build redesigned code with the modified tool-chain to the new APIs;
Define a server security policy;
Define a security policy for data in the new central repository;
Define a security policy for a publish and subscribe service;
Re-implement plug-in architectures via ECOM as separate processes;
Build applications according to the new Application V2 framework;
Provide embedded document services via application servers.

Audience

People who will have an implementation role:

Internal Symbian developers and technical consultants;
Staff with similar roles in Symbian OS Licensee companies;
Staff with similar roles in Symbian Partner companies;
3rd party software developers.

The focus of the class is on the overall phone platforms rather than being aimed at developers of any one category of software.
Any software developer who combines both a design and implementation role is strongly encouraged to attend the “Designing for Platform Security course” before attending this course.

Pre-requisites

The class is designed for experienced Symbian OS developers who have an understanding of OO and C++ in particular. Familiarity with building and developing with an IDE is required. This course requires at least 3 months hands-on experience of developing for Symbian OS.

The course attendee should have attended the Symbian OS Essentials course and at least one of the Application Engines course or Application UI Development course (depending on the developer’s role – attendees may note that different topics require different skill-sets). Details of these courses are available on request.

Style

The class consists of approximately 30% lectures and 70% programming.

Course Content

(The draft class content below may evolve as more of the details are finalised.)

Module 1. Introduction & Key concept review

Explains the setting and requirement for the course and its content
Recaps very briefly the key concepts of unit of protection, capabilities and data caging

Module 2. Build-up security

You will be able to build, debug and write secure code with the new APIs. Topics covered include:

Assign capabilities
Write resilient code
dentify a trustworthy process

Module 3. Use & write secure servers

You will be able to use and write client-side and write server-side code conforming to the new security APIs. Topics covered include:

Use IPC v2 APIs
Police the server security model

Module 4. Share data securely

You will be able to cage your data and share it securely. Topics covered include:

Cage your data and share securely
Write a security policy for the new central repository
Write a security policy for the Publish & Subscribe service

Module 5. Implement ECOM plug-ins

Topics covered include:

Restructure an ECOM plug-in DLL into an out-of process plug-in

Module 6. Make applications secure

Topics covered include:

Re-architect an application to the new UI Framework V2 structure without AIF files
Write an Application Server

For further information, please contact Kay Ferris on +44 207 154 1846 or
technical.training@symbian.com

Further Information

If you require further information about this training course, please contact us via the details below:

Kay Ferris
Training Business Manager
Symbian Ltd
2 - 6 Boundary Row
London
SE1 8HP
UK
+44 20 7154 1846 technical.training@symbian.com