Go offline with the Player FM app!
Build secure mobile applications with Anastasiia Voitova
Manage episode 297638964 series 2952175
In this episode, we talked to cybersecurity expert Anastasiia Voitova about all things related to mobile app security: from the first and most important steps teams should take to prevent potential attacks to reaching a high level of DevSecOps maturity. Besides working at Cossack Labs as Head of Customer Solutions, where she builds data security tools that help companies protect sensitive data, Anastasiia also regularly talks about security & cryptography at conferences and is a community leader of WomenWhoCode Kyiv.
In this episode
In this episode, we talked about all aspects of app security: the benefits of integrating end-to-end security checks, zero-knowledge and zero-trust architectures, and cryptography best practices. We also discussed how mobile teams getting started with app security should approach the implementation of these practices, such as data encryption, authentication, dependency management, secure coding, etc. There are plenty of low-effort, high-reward steps they can take, enabling them to proactively prevent security incidents. We also asked for Anastasiia's opinion on what the future holds when it comes to app security and how she expects these practices to evolve in the coming years.
Show notes:
- OWASP MASVS https://github.com/OWASP/owasp-masvs
- OWASP ASVS https://github.com/OWASP/ASVS
- OWASP SAMM https://owaspsamm.org/model/
- https://github.com/vixentael/security-data-management-for-app-devs-workshop#list-of-defensive-appsec-tools-for-mobile-apps
- https://support.apple.com/guide/security/welcome/web
- https://developer.android.com/topic/security/best-practices
- https://speakerdeck.com/vixentael/maintaining-cryptographic-library-for-12-languages
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-1-gcf
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-2-47nm
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-3-4711
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-4-18eh
14 episodes
Manage episode 297638964 series 2952175
In this episode, we talked to cybersecurity expert Anastasiia Voitova about all things related to mobile app security: from the first and most important steps teams should take to prevent potential attacks to reaching a high level of DevSecOps maturity. Besides working at Cossack Labs as Head of Customer Solutions, where she builds data security tools that help companies protect sensitive data, Anastasiia also regularly talks about security & cryptography at conferences and is a community leader of WomenWhoCode Kyiv.
In this episode
In this episode, we talked about all aspects of app security: the benefits of integrating end-to-end security checks, zero-knowledge and zero-trust architectures, and cryptography best practices. We also discussed how mobile teams getting started with app security should approach the implementation of these practices, such as data encryption, authentication, dependency management, secure coding, etc. There are plenty of low-effort, high-reward steps they can take, enabling them to proactively prevent security incidents. We also asked for Anastasiia's opinion on what the future holds when it comes to app security and how she expects these practices to evolve in the coming years.
Show notes:
- OWASP MASVS https://github.com/OWASP/owasp-masvs
- OWASP ASVS https://github.com/OWASP/ASVS
- OWASP SAMM https://owaspsamm.org/model/
- https://github.com/vixentael/security-data-management-for-app-devs-workshop#list-of-defensive-appsec-tools-for-mobile-apps
- https://support.apple.com/guide/security/welcome/web
- https://developer.android.com/topic/security/best-practices
- https://speakerdeck.com/vixentael/maintaining-cryptographic-library-for-12-languages
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-1-gcf
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-2-47nm
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-3-4711
- https://dev.to/cossacklabs/automated-software-security-testing-for-devs-part-4-18eh
14 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.