The goal of this thesis was to design and describe a secure software development lifecycle for the Android platform. The thesis additionally contains several sections focused on the security factor from various points of view, with emphasis on the processes of threat modeling, static code analysis, and dynamic code analysis. The available tools for these three processes are then compared using the defined metrics.