Wireless and Mobile Device Security Semester VI
Course Code BCY613D CIE Marks 50
Teaching Hours/Week (L: T:P: S) 3:0:0:0 SEE Marks 50
Total Hours of Pedagogy 40 Total Marks 100
Credits 03 Exam Hours 03
Examination type (SEE) Theory
Course objectives:
● Understand the evolution of wired and wireless networks and their societal and
economic impacts.
● Learn about mobile communication technologies and associated security challenges.
● Analyse WLAN fundamentals, vulnerabilities, and threat scenarios.
● Explore security measures for WLANs and mobile devices.
● Gain proficiency in risk assessment and security tools for wireless networks.
Teaching-Learning Process (General Instructions)
These are sample strategies; which teachers can use to accelerate the attainment of the various
course outcomes.
1. Lecturer method (L) does not mean only the traditional lecture method, but different
types of teaching methods may be adopted to achieve the outcomes.
2. Utilize video/animation films to illustrate the functioning of various concepts.
3. Promote collaborative learning (Group Learning) in the class.
4. Pose at least three HOT (Higher Order Thinking) questions in the class to stimulate
critical thinking.
5. Incorporate Problem-Based Learning (PBL) to foster students' analytical skills and
develop their ability to evaluate, generalize, and analyze information rather than
merely recalling it.
6. Introduce topics through multiple representations.
7. Demonstrate various ways to solve the same problem and encourage students to
devise their own creative solutions.
8. Discuss the real-world applications of every concept to enhance students'
comprehension.
9. Use any of these methods: Chalk and board, Active Learning, Case Studies.
Module-1 8 Hours
Evolution of Data and Wired Networking
The Evolution of Data Networks: The Dawn of Data Communication; Early Data
Networks; The Internet Revolution; Advances in Personal Computers and Mobile Phones;
Computers Go Mobile; Convergence of Mobile and Data Networks; Business Challenges
Addressed by Wireless Networking; IP Mobility and BYOD Impact; Security
Considerations and Cybercrime Evolution;
The Evolution of Wired Networking to Wireless Networking: Networking and OSI
Reference Model; Layers of the OSI Model; Transition from Wired to Wireless
Networking; Economic Impact of Wireless Networking; Applications in Health Care,
Warehousing, Retail, and Knowledge Work; WiFi Impact on Developing Nations and IoT
Introduction
Module-2 8 Hours
@#@10012025 1
The Mobile Revolution and Security Threats
The Mobile Revolution: Cellular Communication and Coverage; Frequency Sharing and
Handoff; Evolution of Mobile Networks (1G to 4G/LTE); BYOD and Economic Impact of
Mobility; Business Use Cases for Mobile Networking;
Security Threats Overview: Threat Categories: Confidentiality, Integrity, Availability;
Wireless and Mobile Device Threats: Data Theft, System Access; Risk Mitigation and
BYOD for SMBs; Security Standards and Regulatory Compliance (ISO, NIST, PCI DSS);
Module-3 8 Hours
WLAN Fundamentals and Threat Analysis:
How Do WLANs Work? WLAN Topologies, Service Sets, and Standards; Wireless
Access Points (WAPs) and Antennas; Coverage Area Determination and Site Surveys;
Spectrum and Protocol Analysis;
WLAN and IP Networking Threat and Vulnerability Analysis: Types of Attackers:
Insiders vs. Outsiders; Physical Security, Social Engineering, and Wardriving; Rogue
Access Points and Bluetooth Vulnerabilities; Malicious Data Insertion, Denial of Service,
and Peer to Peer Hacking;
Module-4 Hours
WLAN Security Measures
Basic WLAN Security Measures: Design and Implementation for Security;
Authentication, MAC Filters, VPN, and VLANs; Wired Equivalent Privacy, WPA, WPA2;
Ongoing Management Considerations (Firmware, Physical Security);
Advanced WLAN Security Measures: Comprehensive Security Policies; Authentication
and Access Control (EAP, RADIUS); Intrusion Detection/Prevention Systems and Protocol
Filtering; Advanced Data Protection: WPA2 Modes, VPN, IPsec; User Segmentation,
VLANs, DMZ Segmentation; Device and Network Management;
Module-5 8 Hours
Advanced Mobile Security and Risk Management
WLAN Auditing Tools: Discovery Tools (NetStumbler, Kismet); Penetration Testing
Tools (Metasploit, Aircrackng); Network Enumerators, Protocol Analyzers, and Attack
Tools;
WLAN and IP Network Risk Assessment: Risk Assessment Methodologies and Stages;
Security Risk Analysis and Audits; Legal Requirements and IT Security Management;
Mobile Communication Security Challenges: Mobile Phone Threats: Exploits, Tools, and
Techniques; Security Architectures: Android, iOS, Windows Phone; BYOD and Enterprise
Mobility Management;
Mobile Device Security Models: Security Models: Android, iOS, Windows Phone; Device
Management, Encryption, and Handoff Challenges;
Course outcome (Course Skill Set)
At the end of the course, the student will be able to:
1. Explain the evolution and impact of wired and wireless networks.
@#@10012025 2
2. Identify and categorize security threats to wireless and mobile networks.
3. Design and implement security measures for WLANs and mobile devices.
4. Utilize security tools for auditing and penetration testing.
5. Develop strategies to manage risks in mobile and wireless communication systems.
Assessment Details (both CIE and SEE)
The weightage of Continuous Internal Evaluation (CIE) is 50% and for Semester End Exam (SEE)
is 50%. The minimum passing mark for the CIE is 40% of the maximum marks (20 marks out of
50) and for the SEE minimum passing mark is 35% of the maximum marks (18 out of 50 marks).
A student shall be deemed to have satisfied the academic requirements and earned the credits
allotted to each subject/ course if the student secures a minimum of 40% (40 marks out of 100) in
the sum total of the CIE (Continuous Internal Evaluation) and SEE (Semester End Examination)
taken together.
Continuous Internal Evaluation:
● For the Assignment component of the CIE, there are 25 marks and for the Internal Assessment
Test component, there are 25 marks.
● The first test will be administered after 40-50% of the syllabus has been covered, and the
second test will be administered after 85-90% of the syllabus has been covered
● Any two assignment methods mentioned in the 22OB2.4, if an assignment is project-based
then only one assignment for the course shall be planned. The teacher should not conduct
two assignments at the end of the semester if two assignments are planned.
● For the course, CIE marks will be based on a scaled-down sum of two tests and other
methods of assessment.
Internal Assessment Test question paper is designed to attain the different levels of Bloom’s
taxonomy as per the outcome defined for the course.
Semester-End Examination:
Theory SEE will be conducted by University as per the scheduled timetable, with common question
papers for the course (duration 03 hours).
1. The question paper will have ten questions. Each question is set for 20 marks.
2. There will be 2 questions from each module. Each of the two questions under a module (with
a maximum of 3 sub-questions), should have a mix of topics under that module.
3. The students have to answer 5 full questions, selecting one full question from each module.
4. Marks scored shall be proportionally reduced to 50 marks.
Suggested Learning Resources:
Text book
1. J. Doherty, Wireless and Mobile Device Security. Jones & Bartlett Learning, 2nd edition
Dec. 2021.
Reference Books:
Reference book
1. M. S. Obaidat, A. Anpalagan, I. Woungang, and S. Misra, Security and Privacy in
Wireless and Mobile Networks. MDPI, 2021.
2. M. Zinkus, T. M. Jois, and M. Green, "Data Security on Mobile Devices: Current State of
the Art, Open Problems, and Proposed Solutions," arXiv, 2021. [Online]. Available:
[Link]
3. J. Stevenson, Mobile Offensive Security Pocket Guide: A Quick Reference Guide for
Android and iOS. Independently Published, 2022.
@#@10012025 3
Activity Based Learning (Suggested Activities in Class)/ Practical Based learning
1. Use any WLAN simulator tools to demonstrate the working of RADIUS
protocol (10 marks)
2. Students in a group of TWO or THREE are expected to prepare report on
different Intrusion Detection and Prevention techniques. (15)
@#@10012025 4