Georgia Weidman — Mobile, IoT, and Pen Testing

A secure mobile application can still sit on a compromised device or depend on an insecure cloud service. Penetration tester and author Georgia Weidman joins Robert at CodeMash to explain why enterprise mobile and IoT security requires a wider view. She describes phishing through mobile channels, a QR-code demonstration that delivered a modified restaurant app, and the infrastructure behind connected devices. Georgia also discusses testing the protections vendors promise, learning the fundamentals through her book Penetration Testing, and the business lessons that came with becoming an entrepreneur. Her path from mathematics to security provides the backdrop for a practical conversation about examining the whole environment and understanding what an attacker can actually reach, rather than stopping at an individual app.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Georgia Weidman:
→ Georgia Weidman on LinkedIn

Mentioned in this episode:
→ Penetration Testing: A Hands-On Introduction to Hacking
→ CodeMash

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Mobile and IoT security with Georgia Weidman
02:09 From mathematics to security
03:33 The competition that sparked an interest in hacking
05:28 Mobile and IoT in the enterprise
06:37 Why mobile phishing matters
07:45 A QR code and a modified restaurant app
08:43 Looking beyond the app to the whole device
10:10 Testing mobile security products and controls
11:39 Learning with Penetration Testing
13:43 Building a company and understanding business risk
17:04 Conferences and international readers