The Perimeter Has Been Shattered
Talkat OWASP AppSec Europe 2018 · on Thursday, 2018-07-05· at 09:00· Fleming - 3rd Floor, QEII Centre Broad Sanctuary, Westminster·
summary
Claim: the enterprise perimeter no longer blocks attacks because employee phones, IoT and cloud services communicate outside firewalls. Demonstrations show SMS/QR phishing, Bluetooth and fake cell‑towers delivering exploits (including the Trident chain), rental‑car sync and compromised update servers. Evaluation tests commercial controls—mobile threat defense, mobile application management, MDM and mobile antivirus—and shows they often fail to stop data exfiltration or pivoting. The presenter builds and runs penetration tools and reports repeated successful bypasses of those defenses.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:14Smartphone Pen Test Fair Framework
- 17:04Security Architecture
- 29:34Trident Attack
- 41:18Application Isolation
- 42:00Mobile Device Management
- 44:32Enterprise Mobility Management
related talks
54mThe Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
40mIntegrating Mobile Devices into your Penetration Testing Program
39mBad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions
18mYour Enterprise is Under Attack
40mEnemy Inside the Gates: Securing the New Battleground
48mLateral Movement in the Age of Hybrid Cloud
48mMobile Device Mismanagement
26mBack to the Future. Cross-Protocol Attacks in the Era of 5G