Welcome to Sandbox Brief

"See all things" - Bruce Lee

It's been my recurring plan to write. Whether it's a technical blog, something I observed or have an opinion on. I gave myself plenty of reasons not to do it. Work, imposter syndrome, fear of rejection, etc. But I have reached a point where I am comfortable enough to share my thoughts and opinions.

Hello World 👋

Mobile Security! It's been a passion of mine since college. I have been doing it for over 12 years now. My journey started when the Founder of Better Mobile Security came to our university and pitched an idea. Back then mobile application development was very new and importantly on the right trajectory.

I become one of the early engineers!

I was lucky enough to work on different aspects of the product, sales & support. A rare combination that allowed me to learn many aspects of the industry. I am not going to lie, it wasn't always fun.

Why?

Mobile security is still a niche market. From my experience, most cybersecurity professionals have a vague or incomplete understanding of the ecosystem. Traditional threat vectors that apply to desktop/server environments don't apply to mobile. Apple & Google have been honing their operating systems to address security & privacy issues since their inception 15 years back. Over the years OWASP & MITRE ATT&CK have made a considerable stride in educating leaders & practitioners about the peculiar threat model on mobile. However, this is not enough. I haven’t seen many publications where cybersecurity professionals get to learn and understand this ecosystem better. This newsletter is geared towards this community and I want to contribute what I know.

Really, what else?

I consume a lot of content every week. Technical blogs, market analysis, threat & breach reports, etc. It's difficult to digest all of these if I am simply consuming. One needs time to digest & break down. Writing my thoughts will clarify my thinking & shape my understanding of the field. I have already started sharing my thoughts on my Telegram channel. These are raw, unfiltered thoughts sprinkled with personal updates. This process helps me organize my thoughts and prepares me to write in a longer form here.

What will be covered?

This will NOT be a technical blog. My technical writings are here. Sandbox brief will focus on

1. Threat landscape - Discuss the different aspects of mobile threats & how they evolve and the implications for businesses
2. Company analysis - Discuss mobile security companies, what they solve, and how.
3. Mobile security news - discuss news related to mobile security. This includes security breaches, malware, privacy concerns, etc. I will also delve into how Google & Apple are approaching security and the different nuances.
4. Ideas - Bring up new ideas, solutions & how they might improve the mobile security ecosystem.
5. Case studies & white paper - I will explore a particular topic and write a detailed analysis once in a while.

Schedule

There is no set schedule. Most posts here will include an in-depth review and are not geared toward casual consumption. Don't expect a one-post-per-week schedule. You can follow my LinkedIn or Twitter or Telegram for more frequent updates.