White Paper for Approov by Jason Bloomberg
Given the ubiquity of mobile devices and the global availability of AI-based tools, mobile application hygiene has become a paramount concern for CISOs and their organizations. Based upon this new reality, here are the key takeaways from this Intellyx analysis:
- Assume all mobile apps can be compromised – treat all mobile apps as untrusted. Assume attackers can reverse engineer them and extract any embedded secrets, including passwords, API keys, and more.
- AI has worsened the mobile app hygiene problem – attackers have easy access to powerful AI-based tools they can use to analyze apps, discover vulnerabilities, and automate attacks at scale.
- Protect back-end services and APIs – APIs are the primary security boundary between mobile apps and your back-end. Apply zero-trust principles to every single request hitting your organization.
- Don’t rely on long-lived secrets – since attackers can compromise any secrets, don’t use secrets that persist more than a few seconds. Use short-lived tokens, app attestation, and continuous validation instead.
- Adopt a shift-left, security-by-design architecture – leverage a Zero Secrets Architecture, like the one from Approov, to ensure your mobile apps remain secure even when attackers know everything about their behavior and contents.
Click here to download the white paper.
SHARE THIS:
