Breaking Fraud and Bot Detection Solutions
Demystifying browser fingerprinting and user behavior tracking in fraud detection, exploring vulnerabilities, and sharing real-world implementation flaws in bot prevention systems.
A New Framework to Automate MSTG and MASVS in Your CI/CD Pipeline
Automate mobile app security testing using BDD and UI automation frameworks. Integrate OWASP MASVS/MSTG into CI/CD pipelines for faster, repeatable security checks at DevOps speed.
Fast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide
Explore mobile security essentials, including OWASP's Mobile AppSec Verification Standard and Testing Guide. Learn about network communication, data storage, and privacy requirements for robust app protection.
ECDSA Key Extraction from Mobile Devices via Nonintrusive Physical Side Channels
Explore physical side-channel attacks on ECDSA key extraction from mobile devices, covering analysis methods, results, equipment, and potential countermeasures.
iLock - Immediate and Automatic Locking of Mobile Devices against Data Theft
Innovative mobile device security system using acoustic sensing to automatically lock devices when users leave, preventing data theft and unauthorized access.
When CSI Meets Public WiFi - Inferring Your Mobile Phone Password via WiFi Signals
Explores WiFi signal-based mobile password inference, discussing attack scenarios, challenges, system design, and data processing methods for enhancing cybersecurity awareness.
The Misuse of Android Unix Domain Sockets and Security Implications
Explore Android Unix domain socket vulnerabilities, their security implications, and mitigation strategies in this comprehensive analysis of potential misuse and authentication weaknesses.
Ask the Experts - Protecting Always Connected Windows on ARM PCs for the Hybrid
Explore modern security solutions for hybrid work environments, focusing on Snapdragon-powered PCs with Windows secured-core features to protect against threats in real-time.
WiFi-based IMSI Catcher
Explore WiFi-based IMSI catchers, their potential for easier smartphone tracking, and learn about mitigation strategies for vendors, operators, and users to address privacy concerns.
The State of State Machines
Explore mobile security threats, the evolving landscape, and Zero Trust principles in this insightful discussion on protecting mobile devices and data.
Hey Google, Activate Spyware! - When Google Assistant Uses a Vulnerability as a Feature
Explore Android vulnerabilities allowing unauthorized camera control, revealing security flaws in Google Assistant and discussing implications for user privacy and smartphone security.
All Your SMS & Contacts Belong to ADUPS & Others
Uncover Android firmware vulnerabilities exposing user data to third parties without consent. Learn about ADUPS and other threats to mobile privacy and security.
Under the SEA - A Look at the Syrian Electronic Army's Mobile Tooling
Explore the Syrian Electronic Army's mobile surveillance tools, focusing on SilverHawk, its capabilities, and deployment methods in this cybersecurity analysis.
Deep Dive into ART - Android Runtime for Dynamic Binary Analysis
Explore Android Runtime's evolution, optimization techniques, and structure. Learn to analyze apps by modifying ART to extract real-time information and develop effective analysis techniques without code access.
Basic Security Analysis on Data and Information
Learn essential digital security techniques for analyzing data and information, focusing on threat identification, communication safety, and practical tools for journalists and civil society groups.
Mobile Self Defence
Explore mobile network vulnerabilities and learn self-defense strategies using SnoopSnitch, an Android app that detects common attacks like IMSI catchers and SIM exploits.
Incident Response Beyond Enterprise IT
Explore strategies for effective incident response in emerging domains like cloud, OT, and mobile. Learn about new service models, team structures, and proactive solutions for evolving cybersecurity challenges.
Hacking People's Mind - When Threat Actors Master Social Engineering
Explore the evolving landscape of social engineering in cybersecurity, focusing on new attack vectors, their sophistication, and strategies for fraud prevention teams to counter these emerging threats.
Stick a Pin in Certificate Pinning - How to Inspect Mobile Traffic and Stop Data Exfiltration
Learn techniques to inspect mobile traffic, prevent data exfiltration, and understand certificate pinning. Explore mobile app virtualization, trusted SSL proxies, and hardware-protected clients for enhanced security.
Penetration Testing Trends
Explore current penetration testing trends, challenges in mobile and internal security, and the importance of red teaming with insights from industry expert John Strand.
Blink for Your Password, Blink Away Your Civil Rights?
Explore legal implications of biometric technology on civil rights, focusing on 4th and 5th Amendment protections. Learn design suggestions for mobile devices and tips for users.