Cyber Defense eMagazine November Edition for 2021

More documents

Recommendations

Info

How Certificate Pinning Helps Thwart Mobile MitM Attacks By David Stewart, CEO, Approov The massive deployment of mobile apps is presenting new attack surfaces to bad actors and the API channel between the apps and backend services is one of the 5 defined attack surfaces in the ecosystem. In this article we will explore the challenges of defending this channel and outline some practical steps you can take to put immediate protection in place. Mobile app usage has been increasing year on year and that seems unlikely to change. As shown in the chart below, direct revenue derived from mobile apps is also showing impressive growth. Most consumer facing enterprises now have a mobile app since it is the preferred touchpoint for their customers and even if those apps don’t generate revenue directly for the company, trust in the mobile app platform is vital for brand reputation. Cyber Defense eMagazine – November 2021 Edition 94 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
(Image source: Statista) Attacking the API channel between mobile apps and their backend servers through Man-in-the-Middle (MitM) attacks are a growing threat for mobile users. The ability to intercept and manipulate communications between mobile devices and servers is an issue that has been known for some time and, backed by the explosive growth in mobile app usage, it has become commonplace. In spite of this, many enterprises are not clear on effective and efficient ways to combat these attacks. In the following sections, we'll look at how certificate pinning can help thwart mobile MitM attacks, as well as the pros and cons involved with static versus dynamic pinning, and what else you could do to protect your organization's data and revenue from these types of exploits. Man-in-the-Middle Attacks - A Brief Explainer Man-in-the-middle attacks are when an attacker intercepts or manipulates mobile device communications to gain access to sensitive information. The bottom line is that they give attackers the ability to see any communications, modify messages using the channel, steal login details or certificates from encrypted traffic, intercept sensitive commercial/personal data, or even launch a denial of service attack against the service being accessed via a mobile app with ease. Cyber Defense eMagazine – November 2021 Edition 95 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
The Top 3 Cyber Security Mistakes a
Page 3 and 4:
How To Effectively Secure Connected
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
Cyber Defense eMagazine - November
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
2. Technology and System It is also
Page 37 and 38:
NetOps Enhances Security Growing nu
Page 39 and 40:
the businesses utilizing an indepen
Page 41 and 42:
Sensitive data exposure and the ser
Page 43 and 44: You’ve Been Attacked by Ransomwar
Page 45 and 46: ● Stop the bleeding: Segregate th
Page 47 and 48: Digital Transformation Security: Gu
Page 49 and 50: When the partners and solutions hav
Page 51 and 52: Why The Integration of Netops And S
Page 53 and 54: organizations, where siloed operati
Page 55 and 56: How to protect yourself from cyber
Page 57 and 58: Five Cloud Telephony Security Vulne
Page 59 and 60: By encrypting all data end-to-end a
Page 61 and 62: The following signs may indicate a
Page 63 and 64: The 5 Most Common Cyber-Attacks on
Page 65 and 66: social engineering attacks by reduc
Page 67 and 68: throughout your everyday operations
Page 69 and 70: protect critical systems, applicati
Page 71 and 72: • Protect Data There are various
Page 73 and 74: Overcoming the Limitations of VPN,
Page 75 and 76: • VPN cannot limit access control
Page 77 and 78: About the Author Burjiz Pithawala i
Page 79 and 80: A Work in Progress The Advanced Tec
Page 81 and 82: SOAR Into More Integrated Cybersecu
Page 83 and 84: analyst requires more data to reall
Page 85 and 86: Critically, this survey found that
Page 87 and 88: About the Author Mike East is Vice
Page 89 and 90: complete security strategy should i
Page 91 and 92: Financial Institutions Leveraging C
Page 93: CIAM is an area that is increasingl
Page 97 and 98: than actually going to the server.
Page 99 and 100: and have complete control over all
Page 101 and 102: What Do Spear Phishing Attacks Look
Page 103 and 104: Our report also suggests that emplo
Page 105 and 106: Keeping Your Guard Up: Protecting A
Page 107 and 108: create significant security risks t
Page 109 and 110: Stop Phishing in its Tracks The Del
Page 111 and 112: Lateral Movement - The Key Element
Page 113 and 114: isolating endpoints, MDR analysts c
Page 115 and 116: When Does a Vulnerability Become a
Page 117 and 118: So, what if I change my query from:
Page 119 and 120: How To Bring Your Own Key to Hybrid
Page 121 and 122: Absence of sole control - is BYOK t
Page 123 and 124: On-premise versus virtual HSMs To b
Page 125 and 126: Protect Data with Deep Packet Inspe
Page 127 and 128: This type of Data Breach Prevention
Page 129 and 130: We buy more products...and we’re
Page 131 and 132: Access over Ownership Cybersecurity
Page 133 and 134: How To Do Disruptive Innovation Rig
Page 135 and 136: 3. Verify all patents, trademarks,
Page 137 and 138: Cyber Defense eMagazine - November
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
CyberDefense.TV now has 200 hotseat
Page 151 and 152:
Books by our Publisher: https://www
Page 153 and 154:
Page 155:
show all

Cyber Defense eMagazine November Edition for 2021

Create successful ePaper yourself

Delete template?

Save as template?