Αποτίμηση κινδύνων ασφάλειας κινητών ιατρικών εφαρμογών – Συγκριτική μελέτη περίπτωσης σε περιβάλλον Android και iOS
Assessing the security risks of medical mobile applications – A comparative case study in Android and iOS platforms
View/
Keywords
Ασφάλεια εφαρμογών ; Φορητές συσκευές ; Έλεγχοι ασφαλείας ; Διαχείριση φορητών συσκευών ; Κύκλος ζωής ασφαλούς ανάπτυξης λογισμικού (SDLC) ; Πρωτόκολλα ασφαλούς επικοινωνίαςAbstract
In this thesis, a comprehensive security analysis of 70 popular medical mobile applications was conducted, tested in both Android and iOS platforms, for a total of 140 apps analyzed. The basic methodology includes looking for side channel leaks that can be abused by third-party applications installed on the device, assessing support for old and potentially vulnerable versions of Android and iOS, evaluating device and application integrity protections, conducting dynamic and static analysis to observe runtime behavior such as SSL usage and local data storage practices, and searching for hardcoded keys or other sensitive information embedded in the code. Also, traffic analysis is included to observe communication patterns between the mobile applications and their associated APIs. The overall findings reveal significant underlooked risks in this area. The vast majority of the apps we analyzed, lacked standard security safeguards such as SSL pinning and root detection.
The study highlights the importance of ensuring that medical apps comply with security standards and undergo rigorous testing before being made available to the public. Overall, the findings of this study underscore the need for increased attention to mobile application security, particularly in the healthcare industry where data privacy and security are of paramount importance.
Postgraduate Studies Programme
Κυβερνοασφάλεια και Επιστήμη ΔεδομένωνDepartment
Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα ΠληροφορικήςNumber of pages
67Language
EnglishCollections
Except where otherwise noted, this item's license is described as
Αναφορά Δημιουργού 3.0 Ελλάδα
Αναφορά Δημιουργού 3.0 Ελλάδα