Evaluating Mobile Banking Application Security Posture Using the OWASP’s MASVS Framework

Abstract

In the context of financial gain, hackers are motivated to exploit vulnerabilities that could result in financial or data loss. Trevor Henry Chiboora’s talk will delve into the findings of a comprehensive analysis of 18 mobile applications from different financial institutions in Africa. The assessment, conducted using the Mobile Application Security Verification Standard v2.0 by OWASP as the guide, provides insights into the security practices across different organizational scales. The talk will highlight the importance of proper testing procedures in the financial sector and discuss recommendations for enhancing the security posture of mobile applications.

Date
Feb 6, 2024 12:00 PM — 1:00 PM
Event
Change seminar
Location
CSE 387 (Gates Building), Bill and Melinda Gates Building | Zoom
185 E Stevens Way NE, Seattle, WA 98195

Resources for Attendees

Seminar Details

Presenter Bio
Trevor Henry Chiboora is a dynamic Cyber Security Specialist based in Kigali, Rwanda, with a strong educational background and practical experience. He currently serves as a Research Associate at CyLab Africa, where he works on the VAPTs (Vulnerability Assessment and Penetration Testing) project. In this role, he conducts research related to cybersecurity and specializes in performing Pentests on mobile and web applications. Notably, he played a key role in deploying a state-of-the-art Security Operations Center (SOC) using Elastic Security, MISP, and other integrations. Trevor is dedicated to enhancing the security of cyberspace to protect user’s sensitive information and build trust in the online environment.

About Upanzi Network
Upanzi is an Africa-based network of technology research labs that is working towards a secure and resilient digital transformation of the continent. The network focuses on creating, testing, innovating, and assisting in implementing digital technologies at scale such as identity, payments, cybersecurity, cloud computing, data governance, artificial intelligence, and machine learning, and influencing technology policy recommendations to support low- and middle-income countries. Upanzi is led by Carnegie Mellon University Africa and leverages the strengths of the African Engineering and Technology (Afretec) network. Afretec members include Carnegie Mellon University Africa, the American University in Cairo, the University of Lagos, the University of Nairobi, the University of Rwanda, and the University of the Witwatersrand. Launched in September 2022, the Upanzi is funded by the Bill & Melinda Gates Foundation.

Talk Recording