Mobile AppSec from an attacker's perspective
summary
Introduces attacker tools and techniques used against mobile apps, linking mobile AppSec to web application security and backend services. Demonstrates case studies and static analysis methods that reveal hardcoded credentials and open endpoints so developers can recognize common vulnerabilities and devise mitigations.
AI-written summary · about
chapters (10)
- 0:00Start
- 2:38Appsecco Application Security Clinic?
- 8:16Think Trust - Linux Security
- 19:28What does an attacker do?
- 21:28API to Guess What?
- 32:33Attacker Setup - The Proxy
- 33:17Mobile App Attackers Arsenal
- 38:12Android App Static Analysis
- 41:16Attack Surfaces?
- 42:55What Next - Target the App
related talks
01h 13mAutomated Static And Dynamic Security Analysis of Mobile Apps
29mFixing Mobile AppSec
37mSecuring our apps: anticipate threats, protect users
38mI just hacked your app!
50mAPI Abuse through Mobile Apps: New Attacks, New Defenses
50mAttack Your Apps Before the Bad Guys Do
58mHackers vs Developers: Mobile Applications
40mBest practices for shielding mobile apps from emerging threats