App-solutely Vulnerable: Learning Mobile Security through Build, Fortify, and Attack

Abstract

Teaching effective countermeasures against emerging threats and vulnerabilities in mobile applications has always been an important focus in cybersecurity curriculums. In this paper, we share our experience in developing a group project that allows students to apply techniques learned in a postgraduate cybersecurity course. The group project aims to simulate a real-world challenge in mobile cybersecurity. The project consists of three progressive stages:~Build, Fortify, and Attack. The project involves students building a chat application powered by Artificial Intelligence (AI), fortifying it against vulnerabilities, and then attempting to extract the Application Programming Interface (API) keys of other groups. We provide details of the design and outcomes, and reflect on what has worked for those who wish to adopt similar kinds of group assessments.