{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":300,"width":600,"title":"Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390","description":"Mobile applications have unique risks and threat models compared to server-side applications and infrastructure. Consequently, they need different strategies to ensure their business logic and workflows well secured. We'll dive into some of these defense-in-depth strategies and why they are important to mobile applications. Securing workflows goes beyond input validation and pattern matching suspicious payloads; it requires detailed attention to state machines, edge cases, and collecting signals to evaluate trust. Segment Resources:  https:\/\/hubs.la\/Q04jLKj70  https:\/\/mas.owasp.org\/MASTG\/0x04c-Tampering-and-Reverse-Engineering\/ https:\/\/owasp.org\/API-Security\/editions\/2023\/en\/0x00-header\/  This segment is sponsored by Guardsquare. Visit https:\/\/securityweekly.com\/guardsquare to learn more about them! Show Notes: https:\/\/securityweekly.com\/asw-390 ","author_name":"Security Weekly Podcast Network (Video)","author_url":"http:\/\/securityweekly.com","html":"<iframe title=\"Libsyn Player\" style=\"border: none\" src=\"\/\/html5-player.libsyn.com\/embed\/episode\/id\/41983330\/height\/300\/theme\/custom\/thumbnail\/yes\/direction\/forward\/render-playlist\/no\/custom-color\/88AA3C\/\" height=\"300\" width=\"600\" scrolling=\"no\"  allowfullscreen webkitallowfullscreen mozallowfullscreen oallowfullscreen msallowfullscreen><\/iframe>","thumbnail_url":"https:\/\/assets.libsyn.com\/secure\/content\/203840560"}