Vulnerabilities, threats and attacks on mobile applications

Vulnerabilities, threats and attacks on mobile applications

1. Definition : A vulnerability is an inherent weakness in the design, configuration, or implementation of a network or system that renders it susceptible to a threat.

2. Mobile Phone Vulnerabilities, Threats And Attacks

   • Global Positioning System (GPS)
   • Wi-Fi
   • Bluetooth Technology
   • Subscriber Identity Module (SIM)
   • Cellular
   • Near-Field Communication (NFC)
   • Secure Digital (SD) Card

3. Smart Phone Security Threats

   • Downloadable Applications Threats
     • Malware
       • Spyware
         • Privacy
   • Network and WiFi Security Threats
     • Network Exploits
       • WiFi Sniffing
         • Cross- Platform Attack
   • General Cyber Security Threats
     • Phishing
       • Social Engineering
         • Browser Flaws
   • Physical Threats
     • Loss/ Theft

4. Device Attack Surface

   • Browser
     • Phishing
       • Pharming
         • Data Caching
   • System
     • No passcode/weak passcode
       • IOS Jailbreaking
         • Android Routing
           • No Encryption
   • Phone / SMS
     • Baseband attack
       • SMishing
   • Apps
     • Sensative Data Storage
       • No Encryption / Weak Encryption
         • Config Manipulation
           • Escalated Privileges
             • Unintended Permissions
   • Malware