Application Security

While most Canadian consumers are focused on the features and benefits of the applications (apps), they often overlook application security.

Application security and developers

Application security is concerned with the actions that are taken throughout the development and distribution of an app throughout its life cycle by the developer. Application security often examines and measures:

• The security policy of the app
  
• Potential flaws in the design and development process
  
• Deployment security considerations
  
• How the app can be upgraded and maintenance requirements

Application security and consumers

Since in a Bring Your Own Device (BYOD) environment users are responsible for the actual download or installation of applications, setting configuration and ensuring application security. Often users download apps without considering security or familiarity with the developer or the Website, opening the door for a number potential security issues that could be overcome with a little education. There are a number of resources that Canadian consumers and developers can refer to in order to keep up to date with the latest in application security news, including:

• OWASP: Open web application security project
  
• WASC: Web application security consortium

Types of application security threats

The most common application security threats and attacks that computer users can encounter are:

• Authorization: The app asks users for authorization, essentially seeking greater access to their information, accounts, or computers. Session hijacking: An app takes control of an account or process when granted access to a user’s computer.
  
• Cryptography: Security is breached when there is poor key integration, which can be a result of custom or weak encryption practices.
  
• Compromised information: This occurs when an app gains access to sensitive data or information that is stored on a user’s computer or on an account they allowed access.

Managing application security

Consumers and employees can ensure they are taking the proper security measures when it comes to the download and use of applications. They are:

• Become educated to understand the potential threats facing app developers and users.
• Secure your network and take the necessary steps to ensure your device or computer have proper and up to date antivirus measures in place.
  
• Know the app developers. Purchase or download apps from developers that take security seriously and take it into consideration during their application development process.