7 Tips for Securing an App

Let’s compare hackers with pirates; everyone is in danger and no one seems to be spared in the waters they surf. However, it is possible to enjoy a bit of security if you arm yourself to the teeth against the hacker scum. We share our knowledge about the securing of apps with you.

What follows is useful information for (future) app owners and users. It is information that puts privacy-sensitive data in calmer waters.

Common Weaknesses in Apps

Anyone who is aware of the common security risks in apps will naturally take them into account during construction. We list a few weaknesses in securing an app for you, so that you can get over the shock of the previous paragraph a bit.

Here we go:

• Weak protection of the binary code.
• The data transport between app and server is insufficiently secured.
• Want to know more security risks? Eight other common weaknesses can be viewed here. No worries; if you press the link, you don’t get a virus.

So what is the problem and what is the solution? An example: Mobile malware exploits weaknesses or bugs in the code of apps. securing an app can also be attacked via other means or privacy-sensitive data from customers can be stolen, such as via the chip of a telephone or a so-called rogue application.

To reduce the chance that hackers will encounter weaknesses or bugs in an app, an app developer keeps the code ‘hidden’ via encryption. This makes the code almost unreadable, forcing hackers to go to great lengths to interpret, crack and abuse it.

Measures for Consumers and Businesses

Employees and consumers can take the following precautions:

1. Is an antivirus app recommended?

Ah, control is the mother of certainty. A regular iPhone or iPad cannot download apps from unknown sources; these mobile devices are therefore relatively safe. Android phones come standard with the antivirus service from Google; Varify Apps. Please note, the service only detects app-based malware, not web-based malware (via the browser, for example).

2. The problem with old phones

Personal data is nowadays encrypted with encryption, at least on many smartphones and tablets. On the iPhone this happens by default from iOS 8.0. On Android phones, data is automatically encrypted from Android 6.0 Marshmallow. Also check whether your phone is up to date. We strongly recommend updating your phone, your apps and the latest OS version. However, this is not always possible on an outdated device, as these are not always supported with a new update. View the latest OS versions of iOS and Android here .

3. Unknown sources setting (Android only)

It is unwise to activate the security setting ‘Unknown sources’ on an Android phone. If this setting is activated, you can download apps from outside the app store. You will find almost no malware in the app store; however, it does exist outside. Therefore, it is better to leave the ‘Unknown sources’ setting off.

4. Beware of apps that do not contain malware

Of course, not all apps contain malware. Despite that, apps can still sniff around your data. iPhone apps and Android 6.0 (and later) require permission before they gain access to certain data and functionalities. When a decibel meter app asks for access to your contacts, camera, GPS and Facebook account, alarm bells must undoubtedly start ringing …

5. The super user setting

You can gain access to the entire operating system via root. Handy, to adjust everything to your own taste. In essence, rooting is safe if you know what you are doing. The security risk lies in malware that needs access to ‘the root’ in order to function. If the user does not have access to the root himself, then neither does the malware.

6. Set up your smartphone and tablet as safely as possible

You know the drill ; update apps. And do not turn on the following functions constantly: automatic connection of WiFi to hotspots, GPS, Bluetooth and NFC.

7. Always update your phone or mobile device to the latest OS version.

For companies

While smartphones and tablets pose less of a risk than the desktop when it comes to data breaches, the security of apps should not be ignored.

Customization

Security is a customized product. Not every (app) solution requires the same type of security. We give a simple but clear example: a bag or suitcase, in most cases there is no lock on it. When is it? For example, if it contains very confidential documents, or if it is full of diamonds. We would be happy to talk to you and advise you on safety risks and possible solutions.

Outreach Way is happy to think along with you about solutions for a securing an app. Interested? Then contact us! Over a cup of coffee, we discuss the options and answer your questions. Of course without obligation.