First Steps in Mobile Security Testing

You’re working on a mobile app - maybe it’s your first time, or you are experienced already. Security testing is an area you haven’t come in touch with yet - or you’ve done a bunch of it, just not for mobile. Whatever your starting point, here’s your chance to take your first steps: on mobile, on security, or both!

In this hands-on workshop, we will interact with an intentionally vulnerable Android app and its ecosystem. Step by step, we will learn together what to look out for to discover security problems. Analyzing our own code, third-party dependencies, and data we store on the client side for flaws. Testing the app at runtime to find exploitable vulnerabilities. Looking at relevant backend services, storage, and related infrastructure. We need to consider all parts of the product to build it in a secure way.

Mobile and security can each be overwhelming areas by themselves, yet they don’t have to be - and so does mobile security. There’s always a first step and the next one to follow!