Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 – Ryan Lloyd, Jan Seredynski – ASW #405
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the project to talk about how it's been updated, how orgs can use it, and the challenges orgs face in managing their mobile frameworks and environments. We also cover how agents and LLMs are impacting mobile security and what future iterations of the MAS project might include for securing mobile apps interacting with LLMs or being written by LLMs. Finally, we share practical ways for developers to get involved as OWASP contributors and advocates.
Segment Resources:
This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more!
Ryan has spent the past 25 years working for companies that build software tools for developer teams. Version control, issue tracking, automated testing and app security. In his current role as Chief Product Officer for Guardsquare he engages customers to help identify and solve the biggest challenges in mobile application security.
Jan Seredynski is a mobile security professional with seven years of app development experience. He specializes in secure architectures and anti-tampering techniques. With a keen eye for uncovering vulnerabilities, Jan actively contributes to identifying and resolving CVEs and bugs through bounty programs. He is a valuable contributor to OWASP’s Mobile Security Testing Guide.
Your application isn't running on a network anymore. It's running on dozens of networks you don't control.
Cloud, Kubernetes, APIs, service meshes... the old network perimeter is gone. The question isn't whether traffic is flowing. It's whether you actually know what's talking to what.
Join us for the Network Security Virtual Summit on October 28 and learn how modern teams are securing application connectivity, reducing blind spots, and building resilient architectures without slowing development.
Security Weekly listeners get a free pass! Register now at https://securityweekly.com/netsec using the discount code CSS26-SW
