How We Discovered Thousands of Vulnerable Android Apps in 1 Day

August 18, 2015 • Presentation

By

Joji Montelibano and Will Dormann

In this presentation, we will describe our methodology in discovering these vulnerabilities, and recommend mitigation strategies for both developers and users.

Publisher

Software Engineering Institute

Topic or Tag

Security Vulnerabilities

Abstract

Thousands of Android applications do not implement SSL correctly. Such apps can mislead users into thinking that they are carrying out secure transactions when, in fact, all information is being relayed in clear text! In this presentation, we will describe our methodology in discovering these vulnerabilities, and recommend mitigation strategies for both developers and users.

Software Engineering Institute