A Case Study of Mobile Health Applications: The OWASP Risk of Insufficient Cryptography

A Case Study of Mobile Health Applications: The OWASP Risk of Insufficient Cryptography


DOI: 

https://doi.org/10.30564/jcsr.v4i1.4271

Abstract

Mobile devices are being deployed rapidly for both private and professional reasons. One area of that has been growing is in releasing healthcare applications into the mobile marketplaces for health management. These applications help individuals track their own biorhythms and contain sensitive information. This case study examines the source code of mobile applications released to GitHub for the Risk of Insufficient Cryptography in the Top Ten Mobile Open Web Application Security Project risks. We first develop and justify a mobile OWASP Cryptographic knowledgegraph for detecting security weaknesses specific to mobile applications which can be extended to other domains involving cryptography. We then analyze the source code of 203 open source healthcare mobile applications and report on their usage of cryptography in the applications. Our findings show that none of the open source healthcare applications correctly applied cryptography in all elements of their applications. As humans adopt healthcare applications for managing their health routines, it is essential that they consider the privacy and security risks they are accepting when sharing their data. Furthermore, many open source applications and developers have certain environmental parameters which do not mandate adherence to regulations. In addition to creating new free tools for security risk identifications during software development such as standalone or compiler-embedded, the article suggests awareness and training modules for developers prior to marketplace software release.

Keywords: 

OWASP mobile threats, Cryptography, Mobile application, mHealth, Healthcare, Android

Comments

Post a Comment

Popular posts from this blog

𝐉𝐨𝐮𝐫𝐧𝐚𝐥 𝐨𝐟 𝐀𝐭𝐦𝐨𝐬𝐩𝐡𝐞𝐫𝐢𝐜 𝐒𝐜𝐢𝐞𝐧𝐜𝐞 𝐑𝐞𝐬𝐞𝐚𝐫𝐜𝐡 | 𝐕𝐨𝐥𝐮𝐦𝐞 𝟎𝟔 | 𝐈𝐬𝐬𝐮𝐞 𝟎𝟐 | 𝐀𝐩𝐫𝐢𝐥 𝟐𝟎𝟐𝟑

Image
 𝐉𝐨𝐮𝐫𝐧𝐚𝐥 𝐨𝐟 𝐀𝐭𝐦𝐨𝐬𝐩𝐡𝐞𝐫𝐢𝐜 𝐒𝐜𝐢𝐞𝐧𝐜𝐞 𝐑𝐞𝐬𝐞𝐚𝐫𝐜𝐡 | 𝐕𝐨𝐥𝐮𝐦𝐞 𝟎𝟔 | 𝐈𝐬𝐬𝐮𝐞 𝟎𝟐 | 𝐀𝐩𝐫𝐢𝐥 𝟐𝟎𝟐𝟑 💠 Investigating the Effects of Madden-Julian Oscillation on Climate Elements of Iran (1980-2020) In this research, the effects of Madden-Julian fluctuation on the weather elements of Iran have been investigated with the aim of knowing the effects of different phases in order to improve the quality of forecasts and benefits in territorial planning. #Madden-Julian_oscillation #Tropical_convection #precipitation #Long-wave_radiation #Sub-seasonal_oscillation DOI: https://doi.org/10.30564/jasr.v6i2.5351 💠 Formation and Transport of a Saharan Dust Plume in Early Summer The authors use satellite observations and ground-based measurements to evaluate the WRF-Chem simulations.  #Dust_storm #WRF-Chem #Convection-permitting #Parameterization #MCS DOI: https://doi.org/10.30564/jasr.v6i2.5407 💠 Wavelet Analysis of Average Monthly Temperature New Delhi ...
Read more

Impact of Polymer Coating on the Flexural Strength and Deflection Characteristics of Fiber-Reinforced Concrete Beams

Image
Impact of Polymer Coating on the Flexural Strength and Deflection Characteristics of Fiber-Reinforced Concrete Beams DOI:  https://doi.org/10.30564/jbms.v4i2.5304 Abstract Liquid polymers (LP) have become an important structural material used in the construction industry in the last decade. This paper investigates the viability of using commercially available LPs as a coating material to improve the flexural strength of fiber-modified concrete beams. The scope included preparing rectangular prism concrete beams with a concrete mixture including fly ash and fiber and coating them with four different liquid polymers at a uniform thickness following the curing process while one set of samples was maintained under the same conditions as a control group without coating. In addition, cylindrical samples were prepared to determine the compressive strength of the concrete mixture. Following the curing process in an unconfined open-air laboratory environment for another 28 days, concrete sa...
Read more

𝐉𝐨𝐮𝐫𝐧𝐚𝐥 𝐨𝐟 𝐀𝐭𝐦𝐨𝐬𝐩𝐡𝐞𝐫𝐢𝐜 𝐒𝐜𝐢𝐞𝐧𝐜𝐞 𝐑𝐞𝐬𝐞𝐚𝐫𝐜𝐡 | 𝐕𝐨𝐥𝐮𝐦𝐞 𝟎𝟔 | 𝐈𝐬𝐬𝐮𝐞 𝟎𝟑 | 𝐉𝐮𝐥𝐲 𝟐𝟎𝟐𝟑

Image
   𝐉𝐨𝐮𝐫𝐧𝐚𝐥 𝐨𝐟 𝐀𝐭𝐦𝐨𝐬𝐩𝐡𝐞𝐫𝐢𝐜 𝐒𝐜𝐢𝐞𝐧𝐜𝐞 𝐑𝐞𝐬𝐞𝐚𝐫𝐜𝐡 | 𝐕𝐨𝐥𝐮𝐦𝐞 𝟎𝟔 | 𝐈𝐬𝐬𝐮𝐞 𝟎𝟑 | 𝐉𝐮𝐥𝐲 𝟐𝟎𝟐𝟑 💠 Role of Different Moisture Sources in Driving the Western Himalayan Past-glacier Advances 👉 The insights gained from this synthesis will help us understand the dynamics of glacier response to climate change, which will be valuable for future climate modelling. #Glacial_chrono_stratigraphy #Dating_technique_limits #Climate_drivers #Western_Himalaya #India 🔗 DOI:  https://doi.org/10.30564/jasr.v6i3.5581 ✉ Email: jasr@bilpubgroup.com 👩‍💼 Managing Editor: Lesley Lu 💠 Relationship and Variability of Atmospheric Precipitation Characteristics in the North-West of Ukraine 👉 The paper deals with the issues of differentiation of atmospheric precipitation into gradations according to their characteristics and established meteorological practices. #Precipitation #Gradation #Intensity #Duration #Shower 🔗 DOI:  https://doi.org/10.30564/j...
Read more