Overview
Syllabus
Intro
Why does mobile security matter?
Agile SDLC: where and when to detect vulnerabilities?
Why do mistakes happen?
Mobile Security challenges
Introduce security integration tests
Biggest problem with tests
Solution: BDD
BDD explained: features and steps
Why BDD in security? Communication
Cucumber: the king of BDD
Translate the OWASP MSTG in BDD
Automate the UI
Execute security tests
Get Feedback
Full process in the SDLC
Setup
Target: OWASP MSTG Hacking Playground
OWASP MSTG: Testing Logs for Sensitive Data
BDD: Testing Logs for Sensitive Data
OWASP MSTG: Testing Local Storage for Sensitive Data
BDD: Testing Local Storage for Sensitive Data
Reporting
Integration in CI/CD
Benefits
References
Taught by
OWASP Foundation