DocumentCode :
254114
Title :
App vetting systems: Issues and challenges
Author :
Quirolgico, Steve
Author_Institution :
Computer Security Division, Information Technology Laboratory, National Institute of Standards and Technology
fYear :
2014
fDate :
22-22 May 2014
Firstpage :
1
Lastpage :
13
Abstract :
• App vetting is the process of approving or rejecting an app prior to deployment on a mobile device. • The decision to approve or reject an app is based on the organization´s security requirements and the type and severity of security vulnerabilities found in the app. • Security vulnerabilities including Cross Site Scripting (XSS), information leakage, authentication and authorization, session management, and SQL injection can be exploited to steal information or control a device.
Keywords :
Computer security; Information technology; Laboratories; Mobile communication; Mobile handsets; NIST;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
IT Professional Conference (IT Pro), 2014
Conference_Location :
Gaithersburg, MD, USA
Type :
conf
DOI :
10.1109/ITPRO.2014.7029287
Filename :
7029287
Link To Document :
بازگشت