This is an easy-to-follow guide, full of hands-on and real-world examples of applications. Each of the vulnerabilities discussed in the book is accompanied with the practical approach to the vulnerability, and the underlying security issue. This book is intended for all those who are looking to get started in Android security or Android application penetration testing. You don't need to be an Android developer to learn from this book, but it is highly recommended that developers have some experience in order to learn how to create secure applications for Android.
This is an easy-to-follow guide, full of hands-on and real-world examples of applications. Each of the vulnerabilities discussed in the book is accompanied with the practical approach to the vulnerability, and the underlying security issue. This book is intended for all those who are looking to get started in Android security or Android application penetration testing. You don't need to be an Android developer to learn from this book, but it is highly recommended that developers have some experience in order to learn how to create secure applications for Android.
Aditya Gupta is the founder and trainer of Attify, a mobile
security firm, and leading mobile security expert and evangelist.
Apart from being the lead developer and cocreator of Android
framework for exploitation, he has done a lot of indepth research
on the security of mobile devices, including Android, iOS, and
Blackberry, as well as BYOD Enterprise Security.
He has also discovered serious web application security flaws in
websites such as Google, Facebook, PayPal, Apple, Microsoft, Adobe,
Skype, and many more.
In his previous work at Rediff.com, his main responsibilities were
to look after web application security and lead security
automation. He also developed several internal security tools for
the organization to handle the security issues.
In his work with XYSEC, he was committed to perform VAPT and mobile
security analysis. He has also worked with various organizations
and private clients in India, as well as providing them with
training and services on mobile security and exploitation, Exploit
Development, and advanced web application hacking.
He is also a member of Null—an open security community in India,
and an active member and contributor to the regular meetups and
Humla sessions at the Bangalore and Mumbai Chapter.
He also gives talks and trainings at various security conferences
from time to time, such as BlackHat, Syscan, Toorcon, PhDays, OWASP
AppSec, ClubHack, Nullcon, and ISACA.
Right now he provides application auditing services and training.
He can be contacted at adi@attify.com or @adi1391 on Twitter.
|
Ask a Question About this Product More... |
|
