Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

SEC575 Live Online February

  • Mon, Feb 8 - Sat, Feb 13, 2027
  • 1 Course
  • English
Virtual (ET)
SEC575 Live Online February
  • 6-Day Course: February 8 – 13, 2027

    Earn 36 CPEs.

  • GIAC Mobile Device Security Analyst

    (GMOB)

    Learn about certification.

  • Intermediate Skill Level

    Course material is geared for cybersecurity professionals with hands-on experience.

  • 20 Hands-On Labs

    Apply what you learn with hands-on exercises and labs.

Jump to:

SEC575: iOS and Android Application Security Analysis and Penetration Testing - Live Online

Every employee carries an attack surface that leaves the building each evening, connects to networks nobody vetted, and holds credentials to systems the security team is accountable for. Very few organizations have anyone who can assess it properly.

SEC575 builds that capability over six days of live, virtual instruction. You work in Corellium, running virtualized iOS and Android devices with full root access on current OS versions, straight from the browser. No hunting for a jailbreakable handset on an auction site. The week covers platform internals, static and dynamic analysis, and the back-end infrastructure the apps talk to.

During the Week, You'll Work Through:

  • 20 hands-on labs in the Corellium platform
  • A Capture the Flag event across multiple applications and forensic images
  • Application data storage and inter-app communication analysis on both platforms
  • Decompilation, iOS encryption bypass, and obfuscated application reversing
  • Frida and Objection method hooking, keychain extraction, and runtime manipulation
  • Man-in-the-middle attacks, SSL pinning bypass, and mobile phishing scenarios

Communicating What You Find

Finding a flaw is half the engagement. SEC575 spends real time on characterizing mobile risk using OWASP MASVS, so the report drives a fix instead of sitting in a backlog. 36 CPE credits, aligned to the GIAC Mobile Device Security Analyst (GMOB) certification.

Who Should Take This Course?

Penetration testers and ethical hackers adding mobile to their range, auditors who need technical depth, security staff responsible for assessing or deploying phones and tablets, and administrators supporting mobile fleets. Experience with any programming language and basic Linux terminal comfort are recommended.

Students Say

  • Slide 1 of 2
    Great course so far! I've already rooted a spare google pixel I had laying around.
    Duncan W.KirpatrickPrice
  • Slide 2 of 2
    The practical training in an environment similar to the real thing is very helpful, such as how to create the environment and how to practically search for vulnerabilities.
    Yuki O.Japan Federal Government
Slide 1 of 0

Download the Course Syllabus

To learn more about SEC575, business takeaways, laptop requirements and more, please visit the course page.

Early Bird Offer

Save $500 USD using the code "EarlyBirdNA" and pay for any 4-6 day course (excluding Beta Courses and 300 Level Courses) by December 24, 2026.

Courses

Looking for Group Purchasing? Contact Sales

GIAC Certification Exam Attempt

2 Free practice tests when you add a certification exam attempt to your course. Available for select courses below.

Extra 120 Days of Course Access

Add OnDemand Extended Access for 120 days to help you prepare for your GIAC exam. Available for select courses below.

Featured Speakers

Christopher Crowley
Christopher Crowley

Christopher Crowley

Independent Consultant at Montance, LLC

Chris Crowley, SANS Senior Instructor and SOC consultant, combines 25 years of cyber operations leadership and AI expertise to train defenders to detect, analyze, and respond to modern threats with clarity, confidence, and hands-on precision.

Read more about Christopher Crowley

Three Reasons to Train Virtually

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need right from your home.

  • Personalization

    Hands-on learning with the opportunity to ask questions and receive instant feedback from world-renowned experts. Afterward, reinforce your skills with 4-months of access to daily course lecture archives.

  • Hands-On Labs

    Learn cutting-edge cybersecurity knowledge with hands-on labs that provide you with techniques you can immediately use in your organization.

Woman at Laptop

Frequently Asked Questions

SEC575 Live Online February is taught live in Eastern Time from February 8-13, 2027. Seven days before class, download your digital materials and run the Test Connection check under SANS Live Online in your SANS Account; printed books ship to your registration address about 14 days ahead. Class chat and help run through your course Slack channel.

Other questions are answered in the SANS Live Training FAQ.

Yes. Christopher Crowley teaches SEC575 live online February 8-13, 2027, in Eastern Time: six days and 36 CPEs, aligned with GIAC Mobile Device Security Analyst (GMOB).

No. Labs run on Corellium, which provides virtual iOS and Android devices with root access on current OS versions, in the browser.

Penetration testers adding mobile, auditors who need technical depth, and staff who assess, deploy, or support phone and tablet fleets. Experience with any programming language and basic Linux terminal comfort are recommended.

Yes. It teaches characterizing mobile risk with OWASP MASVS so findings lead to fixes, and the week ends with a Capture the Flag across multiple apps and forensic images.