This course provides comprehensive knowledge of mobile application security, focusing on the OWASP Mobile Top 10. Participants will explore mobile-specific vulnerabilities such as insecure data storage, improper platform usage, and reverse engineering. Hands-on labs will guide learners through mobile app security assessments, using tools like MobSF and Frida to detect vulnerabilities and implement robust security measures.
Key Learning Outcomes:
- Understand and implement the OWASP Mobile Top 10 security risks.
- Perform static and dynamic analysis of mobile applications.
- Use tools like MobSF, Frida, and JADX for vulnerability detection.
- Test mobile apps for insecure data storage, weak authentication, and improper cryptography.
Detailed OWASP Mobile Top 10:
- M1: Improper Platform Usage
- M2: Insecure Data Storage
- M3: Insecure Communication
- M4: Insecure Authentication
- M5: Insufficient Cryptography
- M6: Insecure Authorization
- M7: Client Code Quality
- M8: Code Tampering
- M9: Reverse Engineering
- M10: Extraneous Functionality
Courses | |
Duration | 4 days |
Level | Intermediate |
Outcome | Participants will learn to identify vulnerabilities specific to mobile apps and exploit common security flaws using OWASP standards. |