Mobile retail apps lack basic security

guest · Sep 21, 2020

Mobile retail apps lack basic security
September 18, 2020
https://www.itweb.co.za/content/G98YdqLYQXdvX2PD/pXnWJadMba7bjO1e

The COVID-19 pandemic has quickened a trend that’s already been on the rise for years: mobile commerce. According to eMarketer, in the next two years commerce via mobile apps is expected to grow by 68% and will account for half of all e-commerce purchases.

However, research by Guardsquare has revealed that many of the top retail mobile apps don’t have even basic security protections in place. The company assessed 51 of the top Android mobile retail apps and notified each retail app’s owner of the analysis findings. It conducted both static and dynamic analysis, as well as assessing whether any runtime application self protection (RASP) checks were in place.
Click to expand...

From the research, it became clear that the vast majority of retail apps are not sufficiently protected against reverse engineering and potential exploitation.

“They are easy for bad actors to decompile, attack, and even create fake clones, and are likely to lead to security breaches if they have not already. The overall lack of protection shows retailers may not fully realise the business impact of cutting corners on security.”
The majority of the 51 apps tested relied on name obfuscation alone, which does not provide adequate protection on its own. Overall, 23% of the apps tested had none of the protections listed above, 63% of apps had just one or two of the protections, and not a single one of the apps had five or more protections.
Click to expand...

Log in or Sign up

Mobile retail apps lack basic security

guest Guest

Log in or Sign up

Mobile retail apps lack basic security

guest Guest

Useful Searches