For Mobile Application Security, What Sort of Protection Do App Stores Provide?

iOS (iPhone/iPad)

Non-jailbroken iOS devices can only install applications from the official Apple iTunes App Store. The App Store has an application approval process whose methods are not publicly disclosed, but that does not appear to do meaningful security checking of applications. Instead applications are checked for the use of undocumented APIs or other violations. Apple can disable installed applications via updating a blacklist that the device periodically checks.

Android

Applications for Android phones are typically installed via the Google Marketplace. Application APK files can also be copied onto the device and installed manually in a process called sideloading.

Looking for more guidance on secure mobile application development?

Learn more about Denim Group’s mobile offerings or download Denim Group’s Mobile Application Development Reference.

Leave a Reply

Your email address will not be published. Required fields are marked *