Defending Kestrel Bank's apps and its 6 million customers with the mobile defense stack, eight layers built from the ground up: scope and threat model, secure SDLC and SDK vetting, storage and cryptography, authentication and session, network and API, platform and runtime hardening, testing, release and store governance, and monitoring and metrics; a repackaged clone of the banking app harvesting credentials in a third-party store, caught by attestation as a signature mismatch and taken down the same day; and the board's program metrics of 78 percent MASVS coverage, 91 percent vulnerability SLA, 85 percent SDK freshness and 97 percent attestation pass.

CY-SENIOR-106Senior Level · Mobile Application Security

Mobile Application Security Program — The Mobile Defense Stack

A senior-level program course that builds and runs a mobile application security program defending an organization's own iOS and Android apps and the customers who use them, working the mobile defense stack across scope, secure SDLC, storage and cryptography, authentication and sessions, network and API protection, platform hardening, testing and release governance, and monitoring, response, and metrics.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Scope a mobile app security program against a real portfolio, OWASP Mobile Top 10 2024/MASVS categories, threat actors, and regulator drivers.
Build security into the mobile SDLC with MASVS levels, backlog requirements, SDK vetting, and privacy declarations.
Protect data storage and cryptography, authentication and sessions, and network/API calls end to end.
Harden the platform and runtime, govern testing and release, and monitor, respond to, and measure the program for the board.

Price:৳10,000