Jian Gong

We interact with mobile applications daily for almost every aspect of our lives. Yet how many of these apps have the proper safeguards to protect your data? This presentation will cover techniques that security practitioners can use to evaluate the security and privacy risks of mobile apps using a combination of threat modeling and open source scanning tools. We will discuss a range of technical security steps as well as data privacy considerations in evaluating the real risk of these mobile apps.

People are inundated with information. Many of us are too busy to pay attention to every breach or security vulnerability reported in the news. In some cases, we may not care. How do we communicate good security practices in this era of information overload? We must change the paradigm and evolve the way we implement security awareness programs. In order for us to build a culture that understands and practices good security, we must 1) change how we communicate to our employees, 2) approach awareness as a marketing program, and 3) leverage social networks inherent within organizations.