Download - How to Secure Your Mobile App the Easy Way

Transcript
  • 1.HOW TO SECURE YOURMOBILE APPTHE EASY WAY

2. First, the Facts 3. 163% increase of mobile malware in 2012 4. 78% of the top 100 Android & iOS apps have been hacked 5. 5% of popular apps use tools to defend against hack attacks 6. 40% of popular free iOS apps 7. AND 8. 80% of popular free Android apps 9. were found to be hacked 10. So why should I care 11. Cracked mobile apps risk 12. Revenue Loss Unauthorized Access Intellectual Property Theft 13. Fraud Altered User Experience Brand Damage 14. Does My App Need to Be Secure? YESbut some apps are at greater risk than others 15. High Risk Apps AskLocationCollectuser infoRemoteservers 16. Low Risk Apps Alarm ToClocksDo ListsOfineApps 17. If the big guys cant keep their mobile app secure, how can I? 18. DO 19. Use https:// to get content 20. Maintain updated libraries 21. Use a secure mobile app (CMS) 22. Filter inputs at device level 23. Store in a secure location: iOS = Built-in Keychain class Android = Encrypt data 24. DONT 25. Treat content passed in as trusted !Save to NSUserDefaults" or SharedPreferences" Forget https: GET & POST 26. Connect to an unsecure backend !Use one, static encryption key !Skip code reviews with teams 27. What The Pros Have to Say About This 28. Make sure to encrypt important les if stored locally. Also,defend against operating system vulnerabilities, e.g. for iOS apps, defend against runtime analysis. - Prateek Gianchandani Security Researcher 29. Dont keep info that you arent willing to spend money and time on to protect. Avoid rolling out your own authentication, unless security is your forte of course." - Frank Rietta Web Security Developer 30. sounds like a lot of work... anything i can do quickly to secure my app? 31. Secure mobile app optimization tools 32. Two-Factor Authentication 33. Discover Code Flaws 34. Things to remember about mobile app security 35. The bigger the user base, the greater the need for strong security 36. Mobile users lose their devices, get them stolen, and let people borrow them. !So protect their data! 37. If the NSA has taught us anythingNothing is hack proof or 100% secure 38. OF COURSE THERES A LOT MORE TO LEARN 39. CHECK OUT THIS ANIMATED SECURITY GUIDE FORMORE TOOLS, TIPS, & TRICKS 40. Mobile App Optimization ToolsMobile App CMS Mobile App Feature Switching Send content to your app users in :27 secondsA circuit breaker for your mobile app 41. SOURCES: http://www.mendix.com/think-tank/7-security-compliance-gotchas-in-your-mobile-app-that-you-didnt-think-of-ooops/ http://www.business.ftc.gov/documents/bus83-mobile-app-developers-start-security http://www.arxan.com/resources/ https://www.owasp.org/index.php/Projects/OWASP_Mobile_Security_Project_-_Top_Ten_Mobile_Risks http://highaltitudehacks.com/2013/12/17/ios-application-security-part-25-secure-coding-practices-for-iosdevelopment