Detecting a Vulnerable Version of OpenSSL in Mobile Apps

NowSecure Founder and Board Member Andrew Hoog discusses recent, critical OpenSSL vulnerabilities and their impacts on mobile apps. Out of 3,800 mobile apps, he found that 16% had instances of OpenSSL, what versions of those included OpenSSL, and if those versions had vulnerabilities. Learn about the importance of OpenSSL vulnerabilities, his findings, and how to use SBOM results to detect a vulnerable version of OpenSSL in your mobile app binary.

Additionally, he discusses source code versus binary analysis for mobile SBOMs and how to detect Pushwoosh, a hidden Russian SDK, in mobile apps you use and build.

Duration: ~23 min