SecureWallet is a secure Android-based mobile wallet application developed as part of a Cybersecurity & Digital Forensics project. The project focuses on evaluating and analyzing vulnerabilities in client-side mobile application storage on Android while implementing secure storage and mitigation techniques.
The application simulates a digital wallet system where users can securely manage financial information, authentication credentials, and stored payment cards. The project also investigates how insecure local storage mechanisms can expose sensitive data and demonstrates mitigation strategies using secure Android development practices.
- Analyze Android client-side storage vulnerabilities
- Investigate insecure local data storage risks
- Perform static and dynamic security analysis
- Validate storage vulnerabilities in a controlled environment
- Implement mitigation techniques using secure storage methods
- Demonstrate secure mobile application development practices
- Secure user registration
- Login and logout functionality
- Password management
- Session handling
- Add and manage payment cards
- View financial dashboard
- Profile management
- Secure storage of user data
- Secure local storage implementation
- Encrypted storage mechanisms
- Secure password handling
- Input validation
- Local database protection
- Session management
- Runtime security testing
- Dark/light theme switching
- Responsive Android UI
- Privacy policy integration
- User settings management
- JavaScript
- React Native / Expo
- Node.js / Express
- Prisma ORM
- SQLite / Database layer
- Authentication middleware
- REST API routes
- Java
- Android Studio
- SQLite
- XML Layouts
- JADX
- Apktool
- Frida
- ADB (Android Debug Bridge)
- SQLite Inspection Tools
- Android Client-Side Storage Security
- SharedPreferences Analysis
- Runtime Analysis
- Static Analysis
- Secure Storage Practices
- Vulnerability Validation
- Mitigation Testing
The project included both static and dynamic analysis techniques to identify vulnerabilities related to Android local storage.
- SharedPreferences
- Internal Storage
- SQLite Databases
- Cache Storage
- External Storage
- Plaintext credential storage
- Token exposure
- Weak encryption implementation
- Insecure local data retention
- Improper storage permissions
- Environment Verification
- Static Analysis
- Runtime Behaviour Testing
- Data Extraction & Vulnerability Testing
- Mitigation Testing
- Overall Security Validation
The project includes:
- Use Case Diagram
- Class Diagram
- Activity Diagram
- Sequence Diagram
- Deployment Diagram
- Component Diagram
- Understanding Android storage security risks
- Performing mobile application security testing
- Using reverse engineering tools safely and ethically
- Implementing secure storage techniques
- Evaluating mitigation effectiveness
- Applying cybersecurity principles to mobile development
- Biometric authentication
- Android Keystore integration
- Multi-factor authentication
- Advanced encryption implementation
- Cloud synchronization security
- Expanded penetration testing
This project was conducted in a controlled and authorized testing environment for educational and cybersecurity research purposes only. No unauthorized systems or real user data were targeted.
cd frontend
npm install
npm startcd backend
npm install
npm run dev- Secure user authentication system
- Protected API routes using authentication middleware
- Input validation and error handling
- Secure password management
- Client-side storage security analysis
- Runtime vulnerability testing
- Secure local storage mitigation techniques
- Database structure protection using Prisma ORM
- Session handling and authentication flow management
- JavaScript
- React Native / Expo
- Node.js
- Express.js
- Prisma ORM
- SQLite / Database Layer
- Android Studio
- Frida
- JADX
- Apktool
- ADB (Android Debug Bridge)
- SQLite Inspection Tools
- Android Client-Side Storage Security
- Static Analysis
- Dynamic Analysis
- Runtime Instrumentation
- Vulnerability Assessment
- Secure Storage Practices
- Mobile Application Security Testing
SecureWallet-Android-Security-Analysis
│
├── frontend/
├── backend/
├── screenshots/
├── README.md
└── package.json
Azaan Mahar Arfan
BSc Cybersecurity & Digital Forensics
Kingston University London
Azaan Mahar Arfan
BSc Cybersecurity & Digital Forensics
Kingston University London