Please come join us for our OWASP Denver meeting. Enjoy some great food, drinks and networking courtesy of Solutions II. Come network beforehand and after the presentation (which will start shortly after 6:00)
Leaky mobile apps: how builders and breakers can
tighten the spigot
Mobile devices are always on, always connected, and always near us. The amount and type of data collected by these devices and mobile apps is shocking. And vulnerable mobile apps expose that data to attack. In our static and dynamic analysis of hundreds-of-thousands of mobile apps, we’ve found that 25 percent of them harbor at least one high-risk vulnerability (e.g., collecting and transmitting location, device identifiers, usernames and passwords, and
more in cleartext).
Mobile data may only be as secure as the weakest app on someone’s device. Mobile app developers need to protect the users of their apps by building high quality, secure apps. This presentation will discuss the most common mobile app vulnerabilities we find in our mobile security research (along with a demonstration of a real-world example), how to identify those vulnerabilities, and what to do to remediate them.
PRESENTER: Jon Porter
Jon Porter, Senior Solutions Engineer:
Jon creates successful deployments for NowSecure customers, acting as a liaison between product, engineering, and sales teams. His experience focuses on information architecture, technical implementations, and customized solutions for enterprise clients. Jon holds a M.S. in Computer, Information, and Network Security from DePaul University with a B.A. in Computer Science from Eastern Kentucky University.