Security

There's a fundamental truth in web development that we often forget: the client is always lying. Not maliciously, necessarily. But every pixel rendered in a browser, every byte sent over the wire, every [...]

This is a review of recent mobile app security incidents I work on day to day. We’ll walk through concrete cases from banking, food delivery, and e-commerce to break down how the breaches [...]

Do you need to protect some functionality or store sensitive data in your Android app? Biometric authentication seems both convenient and secure at face value. However under the skin of standardized APIs like [...]

The movie industry is over 100 years now, older even than the computing industry in many ways! It's seen just about every form of computer technology come and go over its long history, [...]

SMS was once the trusted backbone of digital security, powering two-factor authentication and one-time passwords. But over time, the same channel became a favorite tool for fraud. Spam texts, spoofed calls, and large-scale [...]

Everybody knows that passwords are terrible and that passkeys are the solution. They are completely phishing-proof, can't be guessed, and aren't reliant on third party auth providers. But I've been surprised at just [...]

In this session you'll learn everything you need to know about passkeys. We'll cover the history of passwords and two-factor authentication and why they don't always work. We'll see why Passkeys offer a [...]

In this session, we dive deep into the world of Android malware, focusing on how threat actors exploit the platform's Accessibility Service to gain control over devices. Accessibility Service, designed to assist users [...]

When it comes to privacy, encrypted data-in-transit (eg: HTTPS) or encrypted data-at-rest (eg: encrypted hard-disks) schemes provide sufficient cryptographic guarantees in the battle to protect it. The unresolved problem is encrypting data-in-use. Currently, [...]

In a world of 5G (no conspiracy theories please!) smartphones, smart TVs and smart homes, we're inviting more tech into our lives than ever. We're sleepwalking into a future nobody asked for, but [...]

Security can often feel like an unapproachable and mysterious part of an organisation – the department of work prevention, the department of “nope.” But it doesn’t have to be that way. In this [...]

If you've not read RFC 8252, or found it overwhelming, fear not. I will break down this specification, distilling it into digestible key concepts that underscore your everyday work. RFC 8252 provides essential [...]

Do you have secrets to protect within your iOS app? In this informative and engaging talk, we will explore the critical aspects of securing your iOS app's secrets, such as API keys, cryptographic [...]

Wanna take a peek into the high security standards of the financial industry? Wanna learn actionable tips that you could apply next day at work and give value to the security? Being the [...]

As mobile devices become increasingly central to our personal and professional lives, securing applications on these devices becomes more crucial. One of the most effective ways to secure mobile app today is by [...]

# Training Abstract # This course is the culmination of years of experience gained via practical penetration testing of mobile applications as well as countless hours spent in research. We have structured this [...]

# Training Abstract # This course is the culmination of years of experience gained via practical penetration testing of mobile applications as well as countless hours spent in research. We have structured this [...]

# Training Abstract # This course is the culmination of years of experience gained via practical penetration testing of Modern Web applications as well as countless hours spent doing research. We have structured [...]

In this hands-on session, we’ll dive into the world of passkeys and the various types available; From Face ID and Touch ID to physical security keys over USB or NFC. Attendees will learn [...]

# Training Abstract # This course is the culmination of years of experience gained via practical penetration testing of Modern Web applications as well as countless hours spent doing research. We have structured [...]

## Course Objectives ## This course will take any student and make sure that: - The general level of proficiency is much higher than when they came - The skills acquired can be [...]

## Course Objectives ## This course will take any student and make sure that: - The general level of proficiency is much higher than when they came - The skills acquired can be [...]

The growing digitization brings organisations new possibilities regarding their business models. More and more organisations, but also individuals, are using apps because of the interesting opportunities they create. These opportunities also bring new [...]

Building awesome app sometimes differ from building secure app. Along with functional features of an app, building an awesome app means security assurance throughout the whole development lifecycle so that the app is [...]

Developers love writing features--features are what your users see and enjoy. Security seems like an annoying afterthought not worth investing in. But ignore security at your peril--once a threat appears it is too [...]

plain sight An android application usually holds sensitive information, like names, tokens and sensitive data that we would NOT like to fall into the wrong hands. These days applications can be reverse engineered [...]

In this tutorial, we'll cover the latest contributions from Apple for adding strong authentication with a smart card, Passkeys, and security keys. We'll then dive into each solution offering best practices for building, [...]

Git is a version control system that's widely used and often misunderstood. Is it possible to really understand how it works, and maybe, just maybe, enjoy using it? It's my goal in this [...]

In today’s agile development world, product quality is the shared responsibility of everyone on the development team. Many mobile teams, however, don’t have the luxury of having a dedicated QA engineer, making test [...]

A significant amount of confusion exists about what kind of damage is possible when vulnerabilities are found in mobile apps. This talk aims to solve this problem by providing a broad coverage of [...]

Considerations in Cross-Platform Cryptography. It’s easy enough to generate key pairs and cryptographic signatures on any platform. What is not so easy is getting the same cryptography to work on multiple platforms. This [...]

So you have a mobile application and you want to have it secured? Introducing the OWASP Mobile Security Testing Guide (MSTG)! In this talk we will show you how both the guide and [...]