Title :
App vetting systems: Issues and challenges
Author :
Quirolgico, Steve
Author_Institution :
Computer Security Division, Information Technology Laboratory, National Institute of Standards and Technology
Abstract :
• App vetting is the process of approving or rejecting an app prior to deployment on a mobile device. • The decision to approve or reject an app is based on the organization´s security requirements and the type and severity of security vulnerabilities found in the app. • Security vulnerabilities including Cross Site Scripting (XSS), information leakage, authentication and authorization, session management, and SQL injection can be exploited to steal information or control a device.
Keywords :
Computer security; Information technology; Laboratories; Mobile communication; Mobile handsets; NIST;
Conference_Titel :
IT Professional Conference (IT Pro), 2014
Conference_Location :
Gaithersburg, MD, USA
DOI :
10.1109/ITPRO.2014.7029287