A Case Study of Mobile Health Applications: The OWASP Risk of Insufficient Cryptography

A Case Study of Mobile Health Applications: The OWASP Risk of Insufficient Cryptography


DOI: 

https://doi.org/10.30564/jcsr.v4i1.4271

Abstract

Mobile devices are being deployed rapidly for both private and professional reasons. One area of that has been growing is in releasing healthcare applications into the mobile marketplaces for health management. These applications help individuals track their own biorhythms and contain sensitive information. This case study examines the source code of mobile applications released to GitHub for the Risk of Insufficient Cryptography in the Top Ten Mobile Open Web Application Security Project risks. We first develop and justify a mobile OWASP Cryptographic knowledgegraph for detecting security weaknesses specific to mobile applications which can be extended to other domains involving cryptography. We then analyze the source code of 203 open source healthcare mobile applications and report on their usage of cryptography in the applications. Our findings show that none of the open source healthcare applications correctly applied cryptography in all elements of their applications. As humans adopt healthcare applications for managing their health routines, it is essential that they consider the privacy and security risks they are accepting when sharing their data. Furthermore, many open source applications and developers have certain environmental parameters which do not mandate adherence to regulations. In addition to creating new free tools for security risk identifications during software development such as standalone or compiler-embedded, the article suggests awareness and training modules for developers prior to marketplace software release.

Keywords: 

OWASP mobile threats, Cryptography, Mobile application, mHealth, Healthcare, Android

Comments

Post a Comment

Popular posts from this blog

Impact of Polymer Coating on the Flexural Strength and Deflection Characteristics of Fiber-Reinforced Concrete Beams

Image
Impact of Polymer Coating on the Flexural Strength and Deflection Characteristics of Fiber-Reinforced Concrete Beams DOI:  https://doi.org/10.30564/jbms.v4i2.5304 Abstract Liquid polymers (LP) have become an important structural material used in the construction industry in the last decade. This paper investigates the viability of using commercially available LPs as a coating material to improve the flexural strength of fiber-modified concrete beams. The scope included preparing rectangular prism concrete beams with a concrete mixture including fly ash and fiber and coating them with four different liquid polymers at a uniform thickness following the curing process while one set of samples was maintained under the same conditions as a control group without coating. In addition, cylindrical samples were prepared to determine the compressive strength of the concrete mixture. Following the curing process in an unconfined open-air laboratory environment for another 28 days, concrete sample
Read more

Achieving Sustainable Use and Management of Water Resources for Irrigation in Nigeria

Image
Achieving Sustainable Use and Management of Water Resources for Irrigation in Nigeria DOI:  https://doi.org/10.30564/jees.v2i2.2505 Abstract Water resource is available in Nigeria to meet water demand for domestic, agricultural and industrial use. If well enhanced and protected from various source of pollution. However, less information is available on suitability of water resources for irrigation use in Nigeria. This article reviews literature of the past with regards to influence of geogenic and anthropogenic activities on water resource for irrigation purpose in Nigeria and also to explain the current state of suitability of water resource for irrigation studies in Nigeria and gaps in studies. It also summarizes future ways on water resource management and preventive measure for water resource pollution for irrigation use. Related articles were downloaded from Google scholar in water-related issues. This paper tends to review previous article on water resource in Nigeria, and its su
Read more

Soil Bunds Effect on Soil Properties under Different Topographies of the Southwest Ethiopia

Image
Soil Bunds Effect on Soil Properties under Different Topographies of the Southwest Ethiopia Abstract Soil erosion is a major environmental problem affecting development endeavor. Physical soil and water conservation (SWC) measures such as soil bunds are implemented to mitigate soil erosion. However, information on the effects of soil bunds on soil fertility is limited. This study was aimed to evaluate soil quality in fields with soil bunds and with no soil bunds in steep, middle and lower sloping cultivated lands as well as spatial variation of soil properties in between bunds in southwest Ethiopia. About 7-15 years old bunds and nearby cultivated fields lacking bunds were assessed. From 0 cm-20 cm soil depth, a 36 soil samples were collected. Soil texture, soil organic carbon (SOC), total nitrogen (N tot ) and exchangeable potassium (K exch ) were analyzed. Soil bunds showed significantly ( p <0.0.5) greater clay but less sand than adjacent no-bund fields. In steep, middle, and low
Read more