Download Publication

Mobile Application Security Testing – Sum-Up & Landscape Overview
Release Date: 07/13/2020
With the explosion of smart mobile devices, mobile applications (apps) have surpassed websites as the avenue of choice when it comes to consuming services. However, with the proliferation of mobile apps, new security challenges have arisen which need to be addressed.
Users place a good deal of trust in mobile app stores’ abilities to review, test, flag, and block apps that exhibit undesirable behavior. Yet, even with the best expertise and resources touted by the most popular and established app stores, malware manages to slip through their defenses from time to time.
Users place a good deal of trust in mobile app stores’ abilities to review, test, flag, and block apps that exhibit undesirable behavior. Yet, even with the best expertise and resources touted by the most popular and established app stores, malware manages to slip through their defenses from time to time.
In this summary paper, the Mobile Application Security Testing (MAST) Working Group builds off of its 2016 MAST whitepaper and gives an overview of the current MAST landscape.
Key Takeaways:
- Security practices of major mobile app stores
- Popular guides and tools for app testing
- Current MAST trends
- The future of MAST
Who It’s For: App developers, especially anyone concerned with app security.
Download this Resource
Prefer to access this resource without an account? Download it now.
Related Resources
Acknowledgements

Michael Roza
Risk, Audit, Control and Compliance Professional at EVC
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC
Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.
Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. H...

Haojie Zhuang
Haojie Zhuang

Dr. Hing-Yan Lee
Executive Vice President of Government Affairs, CSA
Dr. Hing-Yan Lee
Executive Vice President of Government Affairs, CSA
Dr. Hing Yan Lee serves as the Executive Vice President of Asia Pacific (APAC) for Cloud Security Alliance. Dr. Lee has over 30 years of ICT working experience in both the public and private sectors. In the recent 9+ years, he was Director of National Cloud Computing Office at Infocomm Development Authority, where he was responsible for, inter alia, developing the cloud ecosystem, promoting cloud adoption by government agencies and private...

Srinivas Naik
Srinivas Naik

Henry Hu
Henry Hu

Giovanni Russello
Giovanni Russello
Are you a research volunteer? Request to have your profile displayed on the website here.
Related Certificates & Training

Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more