Fundamentals of Mobile Application Defence training course

Mobile security is becoming increasingly important as iOS and Android user numbers increase and applications become ever more complex. With some organizations relying heavily on mobile applications as a route to market, especially those taking a ‘mobile first’ approach, mobile security must be taken seriously and viewed the same way as existing security controls for your organization’s flagship traditional web applications.

As organizations typically focus on mobile applications being easy to use and intuitive, less emphasis is put on mobile security and therefore less understanding of security tends to be present in mobile development teams.

Our one-day Fundamentals of Mobile Application Defence training course is a great opportunity for those interested in mobile security to look at iOS and Android applications through the eyes of the hacker.

You'll learn about the most common insecurities and vulnerabilities that lay within mobile applications, how to identify them and how to use secure design and development best practices to eliminate these risks. This course will give you the confidence to reduce the risk of mobile applications for your business.

How will I benefit?

Gain an understanding of the best practices for mobile application defence
Get the opportunity to see real exploitation of vulnerabilities on our vulnerable mobile application – helping you understand the real-world impact
Gain insight into the insecurities and vulnerabilities that lay within your mobile applications
Confidently identify and eliminate these new risks before they result in damage to the organization

Who should attend?

Those responsible for developing, managing, testing or maintaining mobile applications, or anyone with an interest in ensuring the security of their mobile application presence, such as:

Mobile application developers
Compliance officers
Technical managers
Information security team members
IT Managers
Team leaders

What will I learn?

Basic iOS and Android Security concepts
Introduction to iOS and Android application structures and security
Insecure applications and formats
Insecure application components
Unauthorised access to critical application files and databases
Data Leakage
Insecure communications
Authentication & Session Management
Cryptography
Authorization
De-compilation and debugging of application code
Static and dynamic code analysis
OWASP Mobile Top 10
Security methodology

In addition to learning about the above vulnerabilities and practices in theory, BSI believe that the best way to demonstrate the impact of these vulnerabilities is to perform live exploitation. These concepts will be demonstrated using BSI’s Android Security Testing Framework (ASTF) tool which has been developed by our in-house mobile experts.