Securing our apps: anticipate threats, protect users
summary
Covers mobile app security for Android following OWASP Mobile Application Security Testing Guide: how to open and inspect APK/AAB files to find images and sensitive strings, investigate databases and SharedPreferences for hidden data, modify apps in debug to analyze code, bypass root checks, and inspect network traffic. Concludes with practical best practices and build/configuration guidance to reduce data leaks and security flaws.
AI-written summary · about
chapters (10)
- 0:00Mobile app security intro
- 3:25MASTG guide overview
- 5:32MobSF decompilation demo
- 12:00Permission and network risks
- 15:51TLS interception techniques
- 19:26Storage and memory risks
- 22:03Data exploitation in apps
- 26:12Securing secrets in code
- 29:13Best practices summary
- 31:38Q&A
related talks
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
45mTen Secrets to Secure Mobile Applications
39mAndroid App Security Fundamentals
24mModern Android App Security: Protecting Code, Keys, and Data
34mDemystifying Android Security
29mSecuring Android Applications - The not so se…
43mSecurity in Android Applications