Building Secure Containers for Mobile Devices

Explore the world of secure containers for mobile devices in this 49-minute conference talk by Ron Gutierrez from OWASP Foundation. Delve into the challenges of providing secure access to sensitive information on personal mobile devices in a BYOD environment. Learn about application wrapping techniques, including dynamic library injection and iOS method swizzling, used to enforce security policies at the application layer. Examine common designs for secure containers, focusing on crypto key storage, authentication methods, and implementation flaws. Gain insights into iOS runtime analysis for reversing implementations and discover testing techniques for assessing secure container solutions. Understand the advantages and disadvantages of these solutions, and acquire knowledge to make informed decisions when choosing or developing mobile security measures for your organization.