Best Practices
As mobile app development teams seek to speed the pipeline to deliver high-quality apps faster, providing everyone with a clear roadmap can make the journey more efficient. To simplify work prioritization and better partner with security teams, consider adopting a practical, effective set of principles to achieve your goals: “Secure by Design” and “Trust but […]
Mobile app dev teams looking to deliver innovative, high-quality mobile apps quickly to meet their organization demands, must include security as early as possible and throughout the software development lifecycle (SDLC). While mobile has become the dominant means of accessing information, mobile DevSecOps maturity frequently lags behind web DevSecOps. If the security strategy is to […]
U.S. federal agencies such as the Department of Defense have adopted mobile DevSecOps to unleash speed and innovation. But risks are plentiful and mobile app security issues have put service members in harm’s way or potentially compromised intelligence. Including security in the mobile app dev process and vetting software supply chain components enables federal agencies to achieve continuous security through automation.
No two organizations face the same challenges in securing their mobile applications — variables include the type of mobile app, frequency of release, maturity of the application security testing program, staffing levels and a host of other factors. But what many companies have in common is that they rely on NowSecure automated mobile application security testing solutions and services to verify the apps they build and buy are safe for use by customers and employees. Learn how MyOwnMed and Vaporstream have strengthened security of their mobile apps and the successes they’ve enjoyed thanks in part to their use of NowSecure services and solutions.
Whether you’re a novice mobile app developer, a seasoned mobile application security analyst or somewhere in between, here’s a roundup of 31 best practices to hone your secure coding and mobile appsec testing skills. You can find useful advice from NowSecure experts in our twice-monthly “All Things Mobile DevSecOps” newsletter — subscribe now to be in the know.
Mobile app users have become more savvy about protecting sensitive personal information and regulations such as the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) restrict data usage and sharing practices. Developers can get ahead of regulatory action and improve the overall user experience by looking for ways to implement mobile app privacy features directly into their mobile apps. Here are six mobile app privacy features they should implement.
Many mobile app developers with the best of intentions have rushed COVID-19 apps to Google Play and the App Store to assist with contact tracing, symptom diagnosis and outbreak maps. But in the speed to get apps that can help fight the pandemic out to the public quickly, some security and privacy vulnerabilities went undetected prior to release. Because the sensitive nature of healthcare information creates unique security and privacy challenges, I advise mobile app developers and security analysts to heed the following advice to avoid fairly common security, privacy and compliance issues.
With the Android 11 preview beta being released last month, you may be scratching your head asking, “What did I miss in Android 10?” Developers will face a Nov. 2 deadline to update their mobile apps to accommodate a target SDK of Android API level 29 or higher. The addition of Scoped Storage ushers in noteworthy changes to external storage, otherwise known as public storage, SD card, shared storage, or emulated storage.
The California Consumer Privacy Act (CCPA) took effect on Jan. 1, 2020, and is currently the toughest, most comprehensive privacy law in the United States. It has also spawned state privacy laws and proposed legislation. Given the level of personal data that mobile apps collect, store and transmit, companies must ensure their apps safeguard sensitive information and comply with CCPA and other relevant privacy laws.
Reverse engineering refers to the process of taking something apart to see how it works. The NowSecure Services team frequently performs reverse engineering on mobile apps to uncover security vulnerabilities and privacy flaws. This tutorial will help you master the basics of analyzing an Android app and knowing what to look for.