Artifact Peer Review

Mobile Application Security Testing – Sum-Up & Landscape Overview

Users place a good deal of trust in mobile app stores’ abilities to review, test, flag and block apps that exhibit undesirable behavior. However, even with the best expertise and resources touted by the most popular and established app stores, and the extensive experience gained from testing and reviewing large numbers of mobile apps, malware still manages to slip through their defenses from time to time to make the headlines. In 2016, with the aim to define a framework for secure mobile application development, achieving privacy and security by design, CSA’s Mobile Application Security Testing (MAST) WG previously worked on and released a MAST whitepaper. Fast forward to 2020, in this summary paper, the WG strives to give readers an overview of the current MAST landscape, what the various mobile app stores are doing in terms of security review and testing of app submitted to them, popular app testing guides and tools. We welcome all feedback and comments during this open review period.