Demystifying OWASP Top 10 Mobile Risks

In this talk we'll have a comprehensive look at the most common security risks that affect mobile applications according to the Open Web Application Security Project, with interesting code samples in Flutter/Dart, as well as some tips and tricks on how to prepare our apps to walk around each potential security risk.

Transcript

2. “ ”
6. Aims to improve software security through community-led projects, local chapters, documentation and training Key initiatives: OWASP Top Ten, OWASP projects, local chapters Funded through memberships, corporate sponsorships and conferences Community-driven collaboration
8. • M1: IMPROPER CREDENTIAL USAGE • M2: INADEQUATE SUPPLY CHAIN SECURITY • M3: INSECURE AUTHENTICATION/AUTHORIZATION • M4: INSUFFICIENT INPUT/OUTPUT VALIDATION • M5: INSECURE COMMUNICATION • M6: INADEQUATE PRIVACY CONTROLS • M7: INSUFFICIENT BINARY PROTECTIONS • M8: SECURITY MISCONFIGURATION • M9: INSECURE DATA STORAGE • M10: INSUFFICIENT CRYPTOGRAPHY
10. • • • • •
11. • • • •
14. • • •
15. • • • • •
16. • •
17. • • • • •
18. • • • • •
23. • • •
24. • • • • •
27. • • •
28. • • • • •
31. • • • •
32. • • • • •
34. • • • • • •
37. • • • •
38. • • • • •
42. • • •
43. • • • • •
48. • • •
49. • • •
50. • • • • •
54. • • •
55. • • • • •
58. • • •
59. • • HTTPS://OWASP.ORG/WWW-PROJECT-MOBILE-TOP-10/ • • @lesterbotello Code samples: