OWASP Podcast/Transcripts/086 - Revision history

Zakiakhmad: /* Transcript */

2011-08-10T04:30:07Z

‎Transcript

Zakiakhmad: /* Participants */

2011-08-08T10:52:35Z

‎Participants

Zakiakhmad: /* Transcript */

2011-08-08T10:48:48Z

‎Transcript

Zakiakhmad: /* Transcript */

2011-08-08T10:46:21Z

‎Transcript

Zakiakhmad: /* Transcript */

2011-08-08T10:45:42Z

‎Transcript

Zakiakhmad: /* Participants */

2011-08-08T10:18:59Z

‎Participants

Zakiakhmad: /* Participants */

2011-08-08T10:16:13Z

‎Participants

Zakiakhmad: /* Transcript */

2011-08-04T07:24:40Z

‎Transcript

Zakiakhmad: /* Participants */

2011-08-04T07:23:32Z

‎Participants

Zakiakhmad: Created page with "== OWASP Podcast #86: Mobile Security == === Participants === === Transcript ==="

2011-08-04T07:21:07Z

Created page with "== OWASP Podcast #86: Mobile Security == === Participants === === Transcript ==="

New page

== OWASP Podcast #86: Mobile Security ==

=== Participants ===

=== Transcript ===

← Older revision		Revision as of 04:30, 10 August 2011
Line 30:		Line 30:
	Chris		Chris
	: Allright I'll take one that Jim. You know, I think the threats are very similar. I mean, every threat model is different. One server app is different with another app even some web apps are different from other apps. So I will agree that in general are the same but there are several differences based on the framework, the operating system, and what the application are really trying to do. We see certain threat vectors, sort of unique enhance mobile devices because of they used. I would say location information is very different mobile devices 24 hours a day, than location information of desktop. Well we have laptops. But it's not really quite the same. In general I would say 80% are correct.		: Allright I'll take one that Jim. You know, I think the threats are very similar. I mean, every threat model is different. One server app is different with another app even some web apps are different from other apps. So I will agree that in general are the same but there are several differences based on the framework, the operating system, and what the application are really trying to do. We see certain threat vectors, sort of unique enhance mobile devices because of they used. I would say location information is very different mobile devices 24 hours a day, than location information of desktop. Well we have laptops. But it's not really quite the same. In general I would say 80% are correct.
		+
		+	Jack
		+	: Let me see. So I agreed that, yes. In general I say the same. You're gonna always have client-server architecture. But the thing is you take web browser. and you have the same origin policy. You know you have protection, they not breakable but they really not. But look at the Android platform, that platform is build on enterprise communication, it's built on one application can invoked and talk to another. So you start to see types of blended threat. You start throwin more exotic technologies that are gonna big in the next few years, ... communications. You start throwing these things. You start drawing these things, Like Chris saying, very-very different threat model, ... I don't think we tend ... we're gonna see it yet.
		+
		+	Jim
		+	: So Jack, what about cryptographic storage? Is there any way to do high assurance low risk cryptographic storage on a mobile device? Especially new platform against the platform it self? Especially new platforms that has significant vulnerabilities against the platform itself. Both in the cases on the iOS and the Android?

@@ Line 3: / Line 3: @@
 === Participants ===
 Kevin Mahaffey <br/>
 [[User:Jack_Mannino|Jack Mannino]] <br/>
 : [http://jack-mannino.blogspot.com blog] <br/>
 : [http://www.linkedin.com/pub/jack-mannino/7/2b7/562 linkedin]
-Chris Wysopal <br/>
+[[User:Chris_Wysopal | Chris Wysopal]] <br/>
 === Transcript ===

@@ Line 20: / Line 20: @@
 Chris
-: Hi this is Chris Wysopal, co founder and CTO of Veracode, and I love the mobile application security.  <br/>
+: Hi this is Chris Wysopal, co founder and CTO of Veracode, and I love the mobile application security.  <br/><br/>
 Jim
@@ Line 26: / Line 26: @@
 Chris
-: Allright I'll take one that Jim. You know, I think the threats are very similar. I mean, every threat model is different. One server app is different with another app even some web apps are different from other apps. So I will agree in general are the same but there are several differences based on the framework, the operating system, and what the application are trying to do. We see certain threat vectors sort of unique enhance mobile devices they use, location information is very different mobile devices 24 hours a day, than location information of desktop. Well we have laptops. In general I would say 80% are correct.
+: Allright I'll take one that Jim. You know, I think the threats are very similar. I mean, every threat model is different. One server app is different with another app even some web apps are different from other apps. So I will agree that in general are the same but there are several differences based on the framework, the operating system, and what the application are really trying to do. We see certain threat vectors, sort of unique enhance mobile devices because of they used. I would say location information is very different mobile devices 24 hours a day, than location information of desktop. Well we have laptops. But it's not really quite the same. In general I would say 80% are correct.

@@ Line 20: / Line 20: @@
 Chris
-: Hi this is Chris Wysopal, co founder and CTO of Veracode, and I love the mobile application security.
+: Hi this is Chris Wysopal, co founder and CTO of Veracode, and I love the mobile application security.  <br/>
 Jim

@@ Line 9: / Line 9: @@
 === Transcript ===
-Welcome to OWASP Podcast number 86, with your host Jim Manico.
+You are listening to the Open Web Application Security Project with your host Jim Manico. <br/><br/>
-Jack Maninno, CEO
+You are listening to the Open Web Application Security Project and this is OWASP Podcast Number 86. And this is the OWASP Mobile Security Round Table. And now our guests: <br/>
 Kevin
-Chris Wysopal, I love Mobile Application Security
+Jack
 Jim
-: OWASP Portugal summit, all the threat, all the defensive coding technique, defending technique allright Chris, youre up, care to comment?
+: So Gentleman last we all met face to face at the OWASP Portugal summit, and I can ... all the threat against mobile, all the defensive coding technique we need the mobile platform is frankly no different than any other web application. Allright Chris, you're up. Care to comment?
 Chris
-: I think the threat are very similar, even some web application
+: Allright I'll take one that Jim. You know, I think the threats are very similar. I mean, every threat model is different. One server app is different with another app even some web apps are different from other apps. So I will agree in general are the same but there are several differences based on the framework, the operating system, and what the application are trying to do. We see certain threat vectors sort of unique enhance mobile devices they use, location information is very different mobile devices 24 hours a day, than location information of desktop. Well we have laptops. In general I would say 80% are correct.

← Older revision		Revision as of 07:24, 4 August 2011
Line 7:		Line 7:

	=== Transcript ===		=== Transcript ===
		+	Welcome to OWASP Podcast number 86, with your host Jim Manico.
		+	Mobile Security Round Table
		+
		+	Jack Maninno, CEO
		+	Kevin
		+	Chris Wysopal, I love Mobile Application Security
		+
		+	Jim
		+	: OWASP Portugal summit, all the threat, all the defensive coding technique, defending technique allright Chris, youre up, care to comment?
		+
		+	Chris
		+	: I think the threat are very similar, even some web application
		+	but there are differences, the operating system, the application are trying to do, enhance mobile devices, location information, mobile devices 24 hour,

← Older revision		Revision as of 07:23, 4 August 2011
Line 2:		Line 2:

	=== Participants ===		=== Participants ===
		+	Kevin Mahaffey <br/>
		+	Jack Mannino <br/>
		+	Chris Wysopal <br/>

	=== Transcript ===		=== Transcript ===