GIAC Mobile Device Security Analyst Certification (GMOB)

Offensive Operations Certification Overview

The GMOB certification validates your ability to assess and manage mobile device and application security, and to mitigate against malware and stolen devices.

Explore SEC575 Course Register for the Exam

Jump to:

Overview
Exam Objectives
Course Alignment
Who It's For
FAQs

What Is the GMOB Certification?

The GIAC Mobile Device Security Analyst (GMOB) certification validates a practitioner's ability to assess and manage mobile device and application security, and to mitigate against malware and stolen devices. GMOB holders are the professionals charged with protecting systems and networks, and they know how to properly secure mobile devices and the information those devices access.

By the numbers

2 hrs

Exam duration

Questions

71%

Min. passing score

What GMOB Covers

GIAC publishes 11 exam objectives for GMOB, which group into four practical domains.

Platform Security and Malware

Spans four GIAC objectives: Managing iOS Devices and Applications, Managing Android Devices and Applications, Unlocking and Rooting Mobile Devices, and Mitigating Against Mobile Malware. Maps to course Sections 1 and 2.

Static Application Analysis

Covers Analyzing Mobile Applications and Reverse Engineering Mobile Applications. Maps to course Section 3.

Dynamic Analysis and Assessment

Brings together Manipulating Mobile Application Behavior and Mobile Application Security Assessments, which uses the Mobile Application Security Verification Standard to audit app security. Maps to course Section 4.

Network Traffic and Device Loss

Includes Manipulating Network Traffic, Attacking Encrypted Traffic, and Mitigating Against Stolen Mobile Devices. Maps to course Section 5.

Prepare With This Course

SEC575: iOS and Android Application Security Analysis and Penetration Testing

Course Details

How SEC575 Prepares You for GMOB

SEC575 is built around the exam objectives that make up the GMOB certification:

Section 1, iOS builds skills tested under Managing iOS Devices and Applications, Unlocking and Rooting Mobile Devices (jailbreaking), and Mitigating Against Mobile Malware.
Section 2, Android aligns with Managing Android Devices and Applications, Unlocking and Rooting Mobile Devices (rooting), and Mitigating Against Mobile Malware.
Section 3, Static Application Analysis builds skills tested under Analyzing Mobile Applications and Reverse Engineering Mobile Applications.
Section 4, Dynamic Mobile Application Analysis and Manipulation aligns with Manipulating Mobile Application Behavior and Mobile Application Security Assessments (using OWASP MASVS).
Section 5, Penetration Testing builds skills tested under Manipulating Network Traffic, Attacking Encrypted Traffic, and Mitigating Against Stolen Mobile Devices.
Section 6, Hands-on Capture-the-Flag Event applies the skills from Sections 1 through 5 across multiple applications, forensic images, and obfuscated malware samples.

Across all six sections, 20 hands-on labs on the Corellium platform (virtualized iOS and Android devices) and a closing Capture-the-Flag event give you the chance to apply each skill before you sit the exam.

Read the full GMOB certification overview

SEC575 Course Author

Jeroen Beckers

Mobile Security Expert at NVISO BE

Jeroen Beckers is a SANS instructor and Mobile Solution Lead at NVISO, specializing in Android and iOS security.

Who Should Pursue GMOB

Security Personnel who assess, deploy, or secure mobile phones and tablets

Penetration Testers

Ethical Hackers

Auditors who need to build deeper technical skills

Network and System Administrators

Frequently Asked Questions

The GMOB certification validates a practitioner's ability to assess and manage mobile device and application security, and to mitigate against malware and stolen devices.

The GMOB exam is a single proctored exam with 75 questions and a 2-hour time limit. The minimum passing score is 71%.

GIAC certifications are renewed on a recurring cycle through continuing education credits and a maintenance fee. For the current renewal requirements, see GIAC’s renewal page.

GIAC built GMOB for security personnel who assess, deploy, or secure mobile phones and tablets, along with penetration testers, ethical hackers, auditors who want deeper technical skills, and network and system administrators.

SEC575: iOS and Android Application Security Analysis and Penetration Testing provides great training if you're thinking of pursuing GMOB. It includes 20 hands-on labs on the Corellium platform and a closing Capture-the-Flag event. GIAC also notes that practical work experience and self-paced study through other programs can build the skills the exam measures.

SANS Institute is a training organization. GIAC LLC is an independent certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO/IEC 17024:2012. Completion of SANS training is not required for GIAC certification, nor does it guarantee a passing exam result.

Ready to earn your GMOB certification?

Add the GMOB exam attempt when you register for SEC575.

Already trained? Register for the exam directly through GIAC.

SEC536: Adversarial AI - Penetration Testing AI Systems