Welcome to Sandbox Brief

"See all things" - Bruce Lee

It's been my recurring plan to write. Whether its a technical blog, something I observed or have an opinion on. I gave myself plenty of reasons for not doing it. Work, imposter syndrome, fear of rejection, etc. But I have reached a point where I am comfortable enough to share my thoughts and opinions.

Hello World;

Mobile Security! Its been a passion of mine since college. I have been doing it for over 10 years now. My journey started when the Founder of Better Mobile Security came to our university and pitched an idea he had. Back then mobile application development was very new and importantly on the right trajectory.

I become one of the early engineers!

I was lucky enough to work on different aspects of the product, sales & support. A rare combination that allowed me to learn many aspects of the industry. I am not going to lie, it wasn't always fun.

Why?

Mobile security is still a niche market. From my experience, most cybersecurity professionals have a vague or incomplete understanding of the ecosystem. Traditional threat vectors that apply to desktop/server environment don't apply to mobile. Apple & Google have been honing their operating systems to address security & privacy issues since their inception 15 years back. Over the years OWASP & MITRE ATT&CK have made a considerable stride to educate leaders & practitioners about the peculiar threat model that exist on mobile. However, this is not enough. I haven’t seen many publications where cybersecurity professionals get to learn and understand this ecosystem better. This newsletter is geared towards this community and I want to contribute what I know.

Really, what else?

I consume a lot of content every week. Technical blogs, market analysis, threat & breach reports, etc. Its difficult to digest all of these if I am simply consuming. One needs time to digest & breakdown. Writing my thoughts will clarify my thinking & shape my understanding of the field. I have already started sharing my thoughts on my Telegram channel. These are raw, unfiltered thoughts sprinkled with personal updates. This process helps me organize my thoughts and prepares me to write in a longer form here.

What will be covered?

This will NOT be a technical blog. My technical writings go here. Sandbox brief will focus on

1. Threat landscape - Discuss the different aspects of mobile threats and how they evolve and the implication for businesses
2. Company analysis - Discuss mobile security companies, what they solve and how.
3. Mobile security news - discuss news related to mobile security. This includes security breaches, malware, privacy concerns, etc. I will also delve into how Google & Apple are approaching security and the different nuances.
4. Ideas - Bring up new ideas, solution & how it might improve the mobile security ecosystem.
5. Case studies & white paper - Once in a while, I will explore a particular topic and write a detailed analysis.

Schedule

These is no set schedule. Most posts here will include an in-depth review and are not geared towards casual consumption. Don't expect a one post per week schedule. You can follow my LinkedIn or Twitter or Telegram for more frequent updates.