Meeting Recaps

We’ve had some excellent meetings so far this year! In case you missed any of these dynamite presentations, there are materials available from each presenter.

June – The Attacker Point of View: Hacking mobile Apps in Your Enterprise

Brian Lawrence, a security engineer at NowSecure, gave a riveting presentation on the mobile app attack surface from an attacker’s point of view (POA). He covered several possible weak points, such as data at rest (where is it stored?), data in motion (how is it sent?), code functionality, and the API backend. He then discussed the OWASP Mobile Top 10 (2016). Next, he demonstrated FRIDA, a “dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.” Members of ISSA can download his presentation (as well as other past presentations) here.