Salt Lake City

The next meeting is scheduled for Thursday, February 6th in conjunction with UtahSec
Date:

 February 6th, 2014

Time:

6 - 8 pm

Meeting location:

LDS Riverton Office Building

3740 W 13400 S

Riverton, UT 84065

"Mobile Application and BYOD (Bring Your Own Device) Security"

By Dmitry Dessiatnikov, Security Aim

Food Sponsor: TBA

Abstract:

''The explosion of the mobile application market coupled with acceptance of "bring your own device" (BYOD) to enterprise environments comes with its unique security risks. While driven by a rise in productivity, convenience and overall user satisfaction BYOD increases the attack surface that most businesses are not prepared for. In this presentation we will cover the reasons for concern along with a demonstration of a remote compromise of an Android phone in a corporate environment. We will also discuss the OWASP top 10 mobile risks and demonstrate some common issues with a vulnerable iOS mobile application. A free tool will be shared with the audience that can be used to assess their corporate BYOD environments. Finally, we will cover some mitigating controls and what can be done to address raised issues.''

Everyone is welcome to join us at our chapter meetings

OpenSAMM Project - Alan Jex - 3 Jan 2013
Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!). Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]