Online Training Special Offer: Get an iPad, ASUS Chromebook or Take $250 Off with Online Training!

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

Going Mobile: Are Your Apps Putting You at Risk?

  • Monday, September 26th, 2016 at 3:00 PM EDT (19:00:00 UTC)
  • Eric Johnson
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!

Overview

With over 3 million apps now deployed in the Apple and Google Play app stores, the importance of mobile application security assessments is at an all-time high. With business critical mobile apps handling payment card, healthcare, and financial information on end user devices, organizations are vulnerable to an entirely new class of mobile software vulnerabilities. As the bad guys shift their focus towards attacking mobile applications, defenders are struggling to keep up.

Join Eric Johnson, contributing author of the new DEV531: Defending Mobile Applications Security Essentials course, to learn about some common issues often found in mobile application vulnerability assessments, such as local data storage, inter-process communication (IPC), and broken cryptography.

Speaker Bio

Eric Johnson

Eric is a co-founder and principal security engineer at Puma Security focusing on modern static analysis product development and DevSecOps automation. His experience includes application security automation, cloud security reviews, static source code analysis, web and mobile application penetration testing, secure development lifecycle consulting, and secure code review assessments.

Previously, Eric spent 5 years as a principal security consultant at an information security consulting firm helping companies deliver secure products to their customers, and another 10 years as an information security engineer at a large US financial institution performing source code audits.

As a Certified Instructor with the SANS Institute, Eric authors information security courses on DevSecOps, cloud security, secure coding, and defending mobile apps. He serves on the advisory board for the SANS Security Awareness Developer training program, delivers security training around the world, and presents security research at conferences including SANS, BlackHat, OWASP, BSides, JavaOne, UberConf, and ISSA.

Eric completed a bachelor's degree in computer engineering and a masters degree in information assurance at Iowa State University, and currently holds the CISSP, GWAPT, GSSP-.NET, and GSSP-Java certifications.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.