AppSec EU 2017 Fixing Mobile AppSec: The OWASP Mobile Project by Bernhard Mueller and Sven Schleier
1,154 views · Published 26 May 2017 · 39:26 · Indexed 4 November 2026
Channel: OWASP Foundation · 2017 · Science & Technology
Even though modern mobile operating systems like iOS and Android offer great APIs for secure data storage and communication, those APIs have to be used correctly in order to be effective. Data storage, inter-app communication, proper usage of cryptographic APIs and secure network communication are only some of the aspects that require careful consideration. The OWASP Mobile Application Verification Standard (MASVS) is an attempt to standardize mobile app security requirements using different verification levels. Complementary to the MASVS, we are developing a Mobile Security Testing Guide (MSTG) that provides detailed test cases for each requirement. In this talk, we introduce both the MASVS and MSTG, and discuss the many challenges we faced during development, from dealing with the diversity and fragmentation of the Android ecosystem to clarifying the role of software protections in mobile security. - Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project
More from this channel
-
45:50
Revenge of the Geeks: Hacking Fantasy Sports Sites - Dan Kuykendall
-
51:38
Application Security at DevOps Speed and portfolio scale - Jeff Williams
-
35:56
HTML5 JS Security - maty siman
-
44:33
CSRF: not all defenses are created equal - Ari Elias-Bachrach
-
42:24
Running at 99% Surviging an Application DoS: Ryan Huber
-
34:16
libinjection: from sqli to xss - Nick Galbreath
-
47:55
Million Browser Botnet - Jeremiah Grossman Matt Johanssen
-
46:05
Next Generation Red Teaming - Robert Wood