• Getting started
• Doc & Code
• Tools & SDKs
• Community
• Support
• Learning

• My SDN

Symbian OS Platform Security

Software Development Using the Symbian OS Security Architecture

Table of Contents

Part 1 Introduction to Symbian OS Platform Security

1 Why a Secure Platform?

User Expectations of Mobile Phone Security
What the Security Architecture Should Provide
Challenges and Threats to Mobile Phone Security
How Symbian OS Platform Security Fits into the Value Chain
How Application Developers Benefit from the Security Architecture

2 Platform Security Concepts

Background Security Principles
Architectural Goals
Concept 1: The Process is the Unit of Trust
Concept 2: Capabilities Determine Privilege
Concept 3: Data Caging for File Access

Part 2 Application Development for Platform Security

3 The Platform Security Environment

Building Your Application
Developing on the Emulator
Packaging Your Application
Testing on Mobile Phone Hardware

4 How to Write Secure Applications

What Is a Secure Application?
Analyzing the Threats
What Countermeasures Can Be Taken?
Implementation Considerations

5 How to Write Secure Servers

What Is a Secure Server?
Server Threat Modeling
Designing Server Security Measures
Server Implementation Considerations

6 How to Write Secure Plug-ins

What Is a Secure Plug-In?
Writing Secure Plug-ins
Plug-in Implementation Considerations

7 Sharing Data Safely

Introduction to Sharing Data
Categories of Data
Deciding the Level of Trust
Attacks on Data and Countermeasures
Using System Services

Part 3 Managing Platform Security Attributes

8 Native Software Installer

Introduction to the Native Software Installer
Validating Capabilities
Identifiers, Upgrades, Removals and Special Files
SIS File Changes for Platform Security
Installing to and from Removable Media

Enabling Platform Security

Responsibilities in Granting Capabilities
Overview of the Signing Process
Step-by-step Guide to Signing
Revocation

Part 4 The Future of Mobile Device Security

The Servant in Your Pocket
Crystal-Ball Gazing
Convergence, Content and Connectivity
Enabling New Services
New Security Technologies
Summary

Appendices

Capability Descriptions
Some Cryptography Basics
The Software Install API