Abstract: Methods and apparatuses disclosed herein for improved mobile app security testing via bridged native and web user interface interaction. In one example embodiment, a method is provided comprising receiving, by a security instrumentation system, an app for analysis, and discovering, by the security instrumentation system, one or more user interface elements provided by the app. Thereafter, interrogating, by the security instrumentation system, the one or more user interface elements provided by the app and serializing, by the security instrumentation system, the one or more user interface elements. In some embodiments, after serializing the one or more user interface elements, causing presentation of the serialized one or more interface elements via a web browser.

Abstract: Embodiments are disclosed for performing static and/or non-emulated dynamic analysis of mobile computing device software to improve app security testing. In the context of a method, an example embodiment includes processing, by a security analysis system, an app for analysis. This example embodiment of the method further includes analyzing the app by diagnostic circuitry of the security analysis system. In this regard, analyzing the app includes at least one of performing static analysis on the app or causing performance, by a lab rig, of non-emulated dynamic analysis on the app. In turn, this example embodiment further includes generating, by the security analysis system and based on analyzing the app, a set of risk issues presented by the app, and outputting, by the security analysis system, the set of risk issues. Corresponding apparatuses and computer program products are also provided.

Abstract: Systems, methods, apparatuses, and computer program products are provided for forensic monitoring. A system may include a forensic analysis apparatus and one or more monitored apparatuses. A monitored apparatus may monitor activity on the monitored apparatus and extract forensic data based at least in part on monitored activity. The forensic data may be transferred from the monitored apparatus to the forensic analysis apparatus for processing and analysis.

Abstract: Methods, apparatuses, and computer program products are provided for database record recovery. A method may include determining a target database record format. The method may further include using the target database record format to evaluate source data for presence of database records matching the target database record format. The method may additionally include, in an instance in which a database record is determined, based on the evaluation, to be present in the source data, recovering the database record from the source data. Corresponding apparatuses and computer program products are also provided.

Abstract: Systems, methods, apparatuses, and computer program products are provided for forensic monitoring. A system may include a forensic analysis apparatus and one or more monitored apparatuses. A monitored apparatus may monitor activity on the monitored apparatus and extract forensic data based at least in part on monitored activity. The forensic data may be transferred from the monitored apparatus to the forensic analysis apparatus for processing and analysis.