75% of mobile applications would fail basic security tests
Cybercriminals are targeting the mobile channel more aggressively than ever before. Mobile applications are increasingly sources of fraud and breaches for organizations and app developers must take a proactive approach to app security.
The OWASP Top 10 Mobile Risks list highlights security flaws and vulnerabilities that developers must protect their applications from.
We have created a checklist on how app shielding can secure your apps based on the 10 most common threats to mobile applications listed by OWASP.
What is app shielding?
Gartner defines In-App Protection as a security solution implemented within the application to make it more resistant to attacks.
Gartner categorizes In-App Protection capabilities into prevention, detection, and «other» capabilities, including Runtime Application Self-Protection (RASP). In-app protection can assist developers and publishers in addressing some of the challenges identified by OWASP.
What is OWASP?
OWASP (Open Web Application Security Project) was founded in 2001 and is a community for developers that works to improve software security through led open-source software projects.
OWASP organizes leading education and training programs in cybersecurity so that thousands of members can ensure that security experts and developers remain aware of the ongoing security threats.
What is OWASP Mobile Top 10?
The OWASP Mobile Security Project is intended to give developers and security teams the knowledge to build and maintain secure mobile applications. Mobile application developers should be familiar with possible security risks that a mobile application might face. Knowing possible risks makes it easier to avoid potential pitfalls, develop secure applications, and protect the users and data. The OWASP Mobile Top 10 presents the highest risks within Mobile applications.
What is the OWASP Mobile Security Testing Guide?
The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering for iOS and Android. The following content is presented in the MSTG guide:
- Mobile platform internals
- Security testing in the mobile app development lifecycle
- Basic static and dynamic security testing
- Mobile app reverse engineering and tampering
- Assessing software protections
- Detailed test cases that map to the requirements in the MASVS.
What is MASVS?
MASVS stands for Mobile Application Security Verification Standard, which is a standard by OWASP. It is a standard for mobile app security. It can be used by developers and mobile software architects seeking information to develop a secure mobile application, as well as security testers, to ensure the completeness and consistency of test results. Read more about MASVS here.
