Tag Info

Hot answers tagged


The issues are mostly the same as for secure software development in general. Note that the most critical issue for secure software development is (1) integrating security into your software development lifecycle (so security is integrated into each step of the process: design, implementation, maintenance, ops), and (2) training of developers. It is a ...


I am not aware of any, but I also don't think its needed. The mobile platform is nothing new. At the end of the day a lot of the same vulnerabilities affect this platform. A lot of mobile apps are just web applications where the client side of the code is written entirely in HTML/JavaScript. That being said Mobile developers violate CWE-602 more than ...


Apple themselves use 256-bit AES for their apps, but you can choose from AES, RC4, or 3DES in a variety of key lengths. See Apple's Certificate, Key, and Trust Services Reference and Cryptographic Services Guide


Quite a few things have been published since the question was asked back in January, including: ENISA Smartphone Secure Development Guidelines for App Developers viaForensics Secure Mobile Development Best Practices (you need to register to download the PDF version) W3C Mobile Web Application Best Practices: W3C Recommendation 14 December 2010 Denim Group: ...

Only top voted, non community-wiki answers of a minimum length are eligible