コース概要
Introduction
Overview of the OWASP Mobile Security Testing Guide
- Key areas in mobile app security
- The OWASP Mobile AppSec Verification Standard (MASVS)
- Navigating the guide
- Mobile app taxonomy
Understanding Mobile App Security Testing Basics
- Mobile app security checklist
- Testing principles
- Setting testing objectives
- Development lifecycle security testing
Running General Testing Techniques for Mobile Apps
- Authentication architectures
- Testing network and cryptography
- Testing code quality
- Tampering and reverse engineering
- Mobile app user interaction
Exploring Android and iOS Platforms
- Android platform overview
- Data storage on Android
- iOS platform overview
- Data storage on iOS
Performing Security Testing for Android
- Android basic security testing
- Testing data storage
- Local authentication
- Android APIs (cryptographic, network, and platform)
- Code quality and build settings for apps
- Tampering and reverse engineering
- Anti-reversing defenses
Performing Security Testing for iOS
- iOS basic security testing
- Testing data storage
- iOS APIs (cryptographic, network, and platform)
- Code quality and build settings for apps
- Tampering and reverse engineering
- Anti-reversing defenses
Contributing to the MSTG Community
- Reading the MSTG
- Contribution guide
- Feature requests and feedback
Summary and Conclusion
要求
- A general understanding of mobile app development lifecycle
- Experience in mobile application development, security, and testing
Audience
- Developers
- Engineers
- Architects
お客様の声 (5)
Multiple examples for each module and great knowledge of the trainer.
Sebastian - BRD
コース - Secure Developer Java (Inc OWASP)
モジュール3 アプリケーションの攻撃とエクスプロイト、XSS、SQLインジェクション モジュール4 サーバーの攻撃とエクスプロイト、DOS、BOF
Tshifhiwa - Vodacom
コース - How to Write Secure Code
Machine Translated
Real-life examples.
Kristoffer Opdahl - Buypass AS
コース - Web Security with the OWASP Testing Framework
The trainer's subject knowledge was excellent, and the way the sessions were set out so that the audience could follow along with the demonstrations really helped to cement that knowledge, compared to just sitting and listening.
Jack Allan - RSM UK Management Ltd.
コース - Secure Developer .NET (Inc OWASP)
Piotr was very knowledgeable and related security issues to real world examples very well. His preparation was brilliant.