David Thiel – författare

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Secure today's mobile devices and applications

Implement a systematic approach to security in your mobile application development with help from this practical guide. Featuring case studies, code examples, and best practices, Mobile Application Security details how to protect against vulnerabilities in the latest smartphone and PDA platforms. Maximize isolation, lockdown internal and removable storage, work with sandboxing and signing, and encrypt sensitive user information. Safeguards against viruses, worms, malware, and buffer overflow exploits are also covered in this comprehensive resource.

Design highly isolated, secure, and authenticated mobile applicationsUse the Google Android emulator, debugger, and third-party security toolsConfigure Apple iPhone APIs to prevent overflow and SQL injection attacksEmploy private and public key cryptography on Windows Mobile devicesEnforce fine-grained security policies using the BlackBerry Enterprise ServerPlug holes in Java Mobile Edition, SymbianOS, and WebOS applicationsTest for XSS, CSRF, HTTP redirects, and phishing attacks on WAP/Mobile HTML applicationsIdentify and eliminate threats from Bluetooth, SMS, and GPS services

Himanshu Dwivedi is a co-founder of iSEC Partners (www.isecpartners.com), an information security firm specializing in application security. Chris Clark is a principal security consultant with iSEC Partners. David Thiel is a principal security consultant with iSEC Partners.

Secure today''s mobile devices and applications

Implement a systematic approach to security in your mobile application development with help from this practical guide. Featuring case studies, code examples, and best practices, Mobile Application Security details how to protect against vulnerabilities in the latest smartphone and PDA platforms. Maximize isolation, lockdown internal and removable storage, work with sandboxing and signing, and encrypt sensitive user information. Safeguards against viruses, worms, malware, and buffer overflow exploits are also covered in this comprehensive resource.

Design highly isolated, secure, and authenticated mobile applicationsUse the Google Android emulator, debugger, and third-party security toolsConfigure Apple iPhone APIs to prevent overflow and SQL injection attacksEmploy private and public key cryptography on Windows Mobile devicesEnforce fine-grained security policies using the BlackBerry Enterprise ServerPlug holes in Java Mobile Edition, SymbianOS, and WebOS applicationsTest for XSS, CSRF, HTTP redirects, and phishing attacks on WAP/Mobile HTML applicationsIdentify and eliminate threats from Bluetooth, SMS, and GPS services

Himanshu Dwivedi is a co-founder of iSEC Partners (www.isecpartners.com), an information security firm specializing in application security. Chris Clark is a principal security consultant with iSEC Partners. David Thiel is a principal security consultant with iSEC Partners.

Eliminating security holes in iOS apps is critical for any developer who wants to protect their users from the bad guys. In iOS Application Security, mobile security expert David Thiel reveals common iOS coding mistakes that create serious security problems and shows you how to find and fix them. After a crash course on iOS application structure and Objective-C design patterns, you'll move on to spotting bad code and plugging the holes. You'll learn about: The iOS security model and the limits of its built-in protections; The myriad ways sensitive data can leak into places it shouldn't, such as through the pasteboard; How to implement encryption with the Keychain, the Data Protection API, and CommonCrypto; Legacy flaws from C that still cause problems in modern iOS applications; Privacy issues related to gathering user data and how to mitigate potential pitfalls Don't let your app's security leak become another headline. Whether you're looking to bolster your app's defences or hunting bugs in other people's code, iOS Application Security will help you get the job done well.