SANS – SEC575: iOS and Android Application Security Analysis and Penetration Testing 2019-6

Updated August 10, 2026 36 MB

Download

About this item

Description

SEC575: iOS and Android Application Security Analysis and Penetration Testing. This course is an intensive, advanced training for security professionals to assess the security of mobile applications and devices in a practical and comprehensive manner. Using the Corellium platform, this course provides participants with the skills necessary to analyze applications, identify vulnerabilities, and conduct full penetration testing. Training topics range from platform architecture and security controls to advanced dynamic analysis techniques and malware assessment. Participants will be introduced to industry-standard tools and methodologies such as OWASP MASVS and learn how to effectively communicate risks to stakeholders. Mobile devices have become the largest attack surface in most organizations and often process highly sensitive data, yet many organizations lack the ability to assess their security. This course specifically focuses on the latest operating system releases, including Android 14 and iOS 17, and prepares students to assess real-world environments and uncover security vulnerabilities. This course aligns directly with the GMOB Professional Certification requirements, providing the expertise needed to protect organizations’ critical mobile infrastructure.

What you will learn

Evaluation of iOS and Android devices: You evaluate these devices through the Corellium virtualized environment.
Static and dynamic analysis: You perform static and dynamic analysis to identify mobile app vulnerabilities.
Bypassing security controls: You bypass platform security controls and encryption mechanisms.
Penetration Testing: You run penetration tests on the mobile infrastructure and backend.
Malware Analysis: You analyze the impact of malware on Android and iOS platforms.
OWASP MASVS Standards: You use the OWASP MASVS standards to assess application security.
Communicating security risks: You effectively communicate mobile security risks to stakeholders.

This course is suitable for people who:

Penetration testers.
Ethical hackers.
Auditors who need to build deeper technical skills.
Security personnel whose jobs involve evaluating, deploying, or securing mobile phones and tablets.
Network and system administrators who support mobile phones and tablets.

Course Details SEC575: iOS and Android Application Security Analysis and Penetration Testing

Publisher: SANS
Instructor: Jeroen Beckers
Training level: Beginner to advanced
Training duration: 18 hours and 46 minutes
Number of lessons: 665

Course headings

SEC575: iOS and Android Application Security Analysis and Penetration Testing

Course Prerequisites SEC575: iOS and Android Application Security Analysis and Penetration Testing

Experience with programming in any language is highly recommended. At a minimum, students are advised to read up on basic programming concepts such as conditional statements, variables, loops and functions. Ideally, students have some experience with either Java or JavaScript. The basics of programming will not be covered in this course.
Students should have a basic working experience with Linux and terminal commands.
Students should have familiarity with penetration testing concepts such as those taught in SANS SEC504: Hacker Tools, Techniques, and Incident Handling.