Mobile Application Penetration Test Training 5

1
ABOUT US

• SECURIUM FOX offers cyber security consultancy
  services with its expert and experienced team. We
  are providing consulting services to prevent
  cyber attacks, data leak and to ensure that our
  customers are ready and safe against cyber
  attacks, with more than 15 years of
  experience.In addition to pentests and
  consulting services, SECURIUM FOX prepares its
  customers and field enthusiasts for real life
  scenarios by providing trainings in the lab
  environment which was prepared by themselves,
  with its young, dynamic and constantly following
  team.Everytime that hackers are in our lives,
  there are always risks that we can face with a
  cyber attack. Over the years cyber security has
  become a critical precaution for all
  organizations and companies after the effects and
  number of attacks. SECURIUM FOX tests the weak
  points of customers for possible attacks and
  provides consulting services to eliminate these
  weak points.SECURIUM FOX team also offers
  support for the development of our country in
  this field by supporting free events being
  organized as a volunteer by the Octosec team.

2

• MOBILE APPLICATION SECURITY AND PENETRATION TEST
  TRAINING

3
OverviewTodays internet traffic is moving from
desktop browsers to mobile browsers, because of
the increased usage of mobile apps.
Unfortunately, mobile applications are not safe,
in fact they introduce serious cyber security
problems for the "data in transit" and the "data
at rest".
4
WHY MOBILE APP SECURITY NEEDS TO BE TESTED?

• Due to a heavy dependency on mobile devices,
  users tend to store their precious data on it.
  Mobile technology uses Android or iOS operating
  systems. Both of those are vulnerable to security
  problems, just as any other operating system.
  Similarly, the applications created and running
  on those are vulnerable too, just as any other
  applications. Hence all applications running on a
  mobile device pose a bigger security threat to
  the data because of the following reasons.
• Data is stored on the device
• Data flows over the wire/wireless
• There are no definite standards on how data
  should be secured while being on the device.
• There is not enough awareness on how data should
  be encrypted while being sent over wire/wireless.

5

• Valency Networks has a dedicated team of experts
  who come from mobile application development and
  web technology development background. We deep
  dive into the mobile application architecture,
  detect various attack vectors for data at rest
  and data in transit scenarios. We have multiple
  success stories ranging into following industry
  sectors for whom we have performed penetration
  testing of their mobile applications.
• Banking and Finance
• Gaming
• Manufacturing
• Payment Gateway
• Social Networking

6
Mobile App Security Testing Features

• Exploit Categories
• On device code exploitation
• Off device code injection
• Called Web Service Exploits
• Authentication problems
• Configuration problems
• SQLite Database related problems

7
Vulnerabilities Detected

• Check for Weak Server Side Controls
• Insecure Data Storage
• Insufficient Transport Layer Protection
• Unintended Data Leakage
• Checks for Poor Authorization and Authentication
• Client Side Injection
• Security Decisions Via Untrusted Inputs
• Improper Session Handling
• Lack of Binary Protections

8
Test Approaches

• Rooting Android Device
• Jailbreaking iOS Device
• Without Rooting/Jailbreaking

9
What do you get by testing security of mobile app?

• It induces the confidence in your and your
  customer's mind from application security
  standpoint.
• It helps you mitigate security risks to your
  customer's data.
• It results in better marketing opportunities for
  your application to sell in global markets.

10
You can always contact with SECURIUM FOX. You can
contact us through our email addresses or by
using the contact form on the side.

• INFO
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,
• Gurunanak Nagar,Patamata,Vijyawada,
• Andhra Pradesh -520010
• 9652038194
• 08666678997
• info_at_securiumfoxtechnologies.com

11

• info_at_securiumfoxtechnologies.com
• Andhra Pradesh Office
• 91 8666678997,91 91652038194
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,Gurunanak Nagar,Patamata,Vijaya
  wada,
• info_at_securiumfoxtechnologies.com
• UK Office
• 44 2030263164
• Velevate, Kemp House, 152 - 160,City Road,EC1V
  2NX
• London
• info_at_securiumfoxtechnologies.com
• Tamil Nadu Office
• 91 9566884661
• Kailash Nagar, Nagar, Tiruchirappalli, Tamil Nadu
  620019
• info_at_securiumfoxtechnologies.com

• Noida Office
• 91 (120) 4291672, 91 9319918771
• A-25, Block A,
• Second Floor,Sector - 3,
• Noida, India
• info_at_securiumfoxtechnologies.com
• USA Office
• 1 [phone]
• 33 West,17th Street,
• New York,
• NY-10011, USA
• info_at_securiumfoxtechnologies.com
• Dubai Office
• 971 545391952
• Al Ansari Exchange, Ansar Gallery - Karama
  Branch, Hamsah-A Building - 3 A St - Dubai -
  United Arab Emirates