Jacobo Casado de Gracia
Co-Founder & CPO
vulnit
Jacobo Casado de Gracia is a Senior Security Evaluator with experience on vulnerability research and penetration testing on a wide variety of software and hardware appliances. Regarding Mobile Security, he has participated in EMVCo projects to evaluate SBMP (Software-Based Mobile Payment) applications.
As part of its work, he contributes to the OWASP Mobile Application Security project, with a particular focus on the evolution of MASTG v2 and MASVS-RESILIENCE. Their work includes tests, techniques, best practices, and runnable demonstrations covering anti-debugging, emulator and virtual-device detection, runtime instrumentation detection, obfuscation, and application integrity controls.
Testing Mobile App Resilience: A Hands-On OWASP MASTG Workshop
Workshop
An 80-minute hands-on workshop where participants test and learn about mobile application resilience mechanisms, like root and emulator detection, anti-debugging, runtime instrumentation detection, integrity checks, and obfuscation in a purpose-built Android application. Every exercise is mapped to OWASP MASVS-RESILIENCE and MASTG v2, with equivalent iOS patterns and practical remediation guidance.
This workshop gives developers and security professionals an opportunity to learn mobile resilience testing directly from contributors who helped turn these mechanisms into focused, reproducible tests and runnable demos for OWASP MASTG v2.