YoVDO

Keep it Like a Secret - When Android Apps Contain Private Keys

Offered By: Security BSides San Francisco via YouTube

Tags

Security BSides Courses Cybersecurity Courses Encryption Courses SSH Courses OpenVPN Courses

Course Description

Overview

Explore the critical issue of private key exposure in Android applications through this eye-opening conference talk. Discover how Will Dormann processed over 1 million Google Play Store apps to uncover thousands of improperly secured private keys. Learn about the various types of exposed keys, including PGP, SSH, OpenVPN, app signing keys for both Android and iOS, and HTTPS web server keys. Gain insights into password cracking techniques used to access protected private keys and understand the potential security implications of these exposures. Delve into the reasons behind this widespread problem, whether due to inappropriate design or accidental inclusion, and consider the importance of proper key management in mobile app development.

Syllabus

BSidesSF 2018 - Keep it Like a Secret: When Android Apps Contain Private Keys (Will Dormann)


Taught by

Security BSides San Francisco

Related Courses

Computer Security
Stanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network