Applications are the software designed to run on platforms like desktops, mobiles etc. Mobile applications turn a device into miniature powerhouses of function and fun. A lot of applications come preloaded with the mobile phone and other can be downloaded via the App store in iOS and Play store in android devices. Many online entities have both mobile websites and mobile applications. In general, an application is usually smaller in scope than a mobile website. It offers more interactivity and presents more specific information in a format that is easy to use on a mobile device. The applications are to be created such that they are compatible with the operating system of the mobile phone. An application available for android OS will not run on iOS. A separate application is to be created which is compatible with iOS.

Application Security refers to protecting application from digital fraud in form of data theft, viruses etc. We use multiple applications on our devices which contain a lot data that include a lot of personal information which needs to be secured. Securing applications to prevent and preserve our data can be considered as Application Security.

Securing Applications:

Many people download mobile apps without verifying its source. Always ensure to download applications from a legitimate source and avoid transfer of applications between phones. The very basic step to secure application is to protect it with a strong passcode. Mobile phone brands usually embed a password protecting feature in the devices which can be used by the user to password protect the applications. Various applications on the App store/ play store are available which enables the users to secure applications using a passcode.

Depending on the nature of the application, it requires some permissions. Make sure to give the application permission to access only required data. Never allow applications to access all data on your device. Some applications like Google maps require to access the GPS services on your mobile device while using the app as well as in background. Allow background permissions only if needed by the user. These applications have access to large amounts of user data, much of which is sensitive data and must be protected from unauthorized access.

App permissions govern what your app is allowed to do and access. This ranges from access to data stored on your phone, like contacts and media files, through to pieces of hardware like your handset’s camera or microphone. Granting permission allows the app to use the feature. Denying access prevents it from doing so. Applications cannot automatically grant themselves permissions, they have to be confirmed by the user. Apps will ask you to accept each of their permissions the first time you launch them via a popup that asks you to “allow” or “deny” each request.

Below mentioned are some examples of app permissions usually requested by applications:

Body Sensors – allows access to your health data and step count, from paired heart-rate monitors, fitness trackers, and other sensors.

Calendar – allows apps to read, create, edit, or delete your calendar events.

Camera – taking photos and recording video.

Contacts – read, create, or edit your contact list, as well as access the list of all accounts used on your device.

Location – access your location using GPS for high accuracy, and cellular data and Wi-Fi for approximate accuracy.

Microphone – used for recording audio, including for video.

Phone – access your phone number and network info. Required for making calls and VoIP, voicemail, call redirect, and editing call logs.

SMS – read, receive, and send MMS and SMS messages.

Storage – read and write files to your phone’s internal and external storage.

Remember, you can always check out all the permissions an app requests before you install it by checking out the description in the Google Play Store.

Common issues that affect mobile apps include:

• Storing or unintentionally leaking sensitive data in ways that it could be read by other applications on the user’s phone.
• Implementing poor authentication and authorization checks that could be bypassed by malicious applications or users.
• Using data encryption methods that are known to be vulnerable or can be easily broken.
• Transmitting sensitive data without encryption over the Internet.

These issues could be exploited in many ways; for example, by malicious applications on a user’s device, or by an attacker who has access to the same WiFi network as an end user.

Best Practices:

• Download Applications from trusted sources only.
• Monitor applications for any unusual behavior.
• Don’t save login credentials in any application.
• Don’t let applications run in the background. Close it once download is completed.
• Use antivirus tools to scan for any malicious application.
• Use encryption or passwords to secure applications.

Threats:

• Login credentials can be stolen.
• Credit/Debit card details can be stolen.
• Unsecured application can be accessed by anyone.
• Malware can be installed using unsecured application.
• Apps have permissions to access our data, complete data can be stolen.
• Modified application may lead to ban from that service.

 Conclusion:

Application security is essential as we use mobile devices and applications for our daily work and entertainment. A lot of personal information and documents are stored in the applications we use. In order to ensure protection of the data we need to secure the applications. Keeping in mind the threats that can occur from unsecured applications it is suggested to ensure your applications are secured and your data is safe.