Secure React Native Apps Against API Abuse

Secure React Native Apps Against API Abuse

Learn to protect React Native mobile applications from API exploitation in this 45-minute OWASP Foundation talk. Explore the dark API economy, mobile app vulnerabilities, and attack surfaces using the ShipFast Driver App as an example. Discover common API gateway defenses, including the API proxy pattern, code obfuscation, and certificate pinning. Address challenges like rooting and instrumentation, and implement app-level message protection. Examine strategies for removing secrets from app packages, improving run-time defenses, and authenticating apps off-device. Gain insights into API defense objectives and potential attacker pivots to less secure applications.