Amy Schurr
Vastly outnumbered by developers, mobile application security analysts often face challenges in creating a security-first culture. Many have found success by launching security champion programs to amplify and scale security throughout their organizations. Identifying security advocates within the development team promotes security by design practices and reduces vulnerabilities. Mature appsec programs have a 1:50 ratio […]
Only 22% of developers have a clear understanding of which security policies they are expected to comply with, according to the “Bridging the Developer and Security Divide” study conducted by Forrester Consulting on behalf of VMware. For many organizationes, adopting mobile security standards such as OWASP Mobile Application Security Project Verification Standards (MASVS) can play […]
Google Play hosts nearly 3.5 million Android mobile apps and counting that have been downloaded by billions of users. To help users make informed choices about the mobile apps they install, Google has begun requiring mobile app developers to disclose how their apps collect, share and secure user data. “At Google, we know that feeling […]
Mobile application security refers to the practice of identifying, analyzing and managing the risk associated with mobile apps throughout the software development lifecycle. The discipline encompasses technologies and techniques designed to reduce the impact and likelihood of attackers stealing users’ passwords and sensitive data such as credit card payment information. Continuous mobile application security testing […]
Taking the perspective of an attacker and attempting to exploit mobile apps offers valuable insights into app security and privacy vulnerabilities. In fact, many organizations’ risk management programs require regular manual pen testing assessments of mobile apps to ensure they’re secure. Security analysts and pen testers rely on an arsenal of mobile app security testing […]
Mobile application security professionals following best practices for OWASP Mobile Application Security Testing now have a new resource to enhance their efficiency. As part of a series of updates to the OWASP MASVS and OWASP MASTG, the OWASP Mobile Application Security Project recently released a new fully automated version of its OWASP Mobile Application Security […]