Mark Cunningham

presently:

Mobile Security Engineer

formerly:

Technical PM /Founding Member

mark@verditious.com@AppSecProjMngr510.574.5975

The Project:

Volunteers Needed for:

Administered by:

John Yeoh: CSA Mobile Working Group Research Analyst

David Lingenfelter: Maas360 / FiberLink InfoSec Officer

Authentication with mobile devices takes many forms and this initiative will help lay out the different levels of authentication including device, app, service, document, etc. as well as different forms of authentication simple, token, multifactor, etc. The initiative will also cover key and password management.

Auth Needs You!

What, exactly are you going to do here?

Proposed Deliverable:

• Document that specifies different types of authentication across the 3 main mobile platforms and their contextual granularity

• Pros and cons of each

• How to implement / How to test / Preventing Bypass

• Info-Graphic of Risk vs Recommended Auth Typeon a per-deployment basis

f(x); yourRisk( Auth type ) ; = implementation

Rewards:

• You get to hang out with me and John. Drinks are on me.

• There’s a big party in Orlando to present the final deliverable.

• You get to participate in a cool project.