App Security Essentials
summary
Explains concrete fixes: how to encrypt to the recipient’s public-key so only their private key can decrypt, when to attach a digital signature to prove origin, and how to implement robust certificate validation/TLS instead of trusting the platform by default. Demonstrates common failures (biometric unlock fallbacks, weak certificate checks), shows scanning results that about 4% of top iOS apps perform proper server certificate checks, and gives actionable code-level checks to add.
AI-written summary · about
chapters (7)
- 0:00Introduction to app security
- 2:07Common security pitfalls in apps
- 9:12Complexity and testing challenges
- 16:24Encryption and public key issues
- 21:03Real-world app vulnerabilities
- 24:30Biometric security risks
- 27:40Q&A and closing
related talks
46mA More Secure World for Android Apps
27miOS Attack Vectors and how to protect your app
39mMobile App Security
47mSecurity Threats & Mitigations for iOS Developers
39mAndroid App Security Fundamentals
45mTen Secrets to Secure Mobile Applications
44mPractical Security
37mPractical security for Android apps