OWASP Top 10 Mobile Risks: 2014 Reboot
Talkat AppSec California 2014 · on Tuesday, 2014-01-28· at 16:15· Track 1, Annenberg Community Beach House, East Pacific Coast Highway·
summary
OWASP publishes a data-driven reboot of the Mobile Top 10 that reorders risks based on 800+ mobile assessments and ~250 unique vulnerabilities showing the top 20 produce 50% of issues on server‑side backends. New items include M10 lack of binary protections (anti‑root, obfuscation, strip symbols), insecure data storage moves to #2 (file encryption and iOS data protection classes), and certificate pinning adoption remains surprisingly low.
AI-written summary · about
chapters (5)
- 0:00Start
- 2:44We used vulnerability data and identified the most prevalent features and capabilities within a wide sampling of mobile applications
- 29:5490 day community feedback period (again)
- 30:27Merge community feedback
- 30:42Publish a formal document and update the wiki
