Mobile app security
The Mobile App Threat
A full 82% said increased use of mobile apps represents at least a significant increase in security risk.
Factors Resulting in Vulnerable Mobile App Code
More than three-quarters (77%) cited the need to rush apps to market, followed by a lack of understanding of best practices (73%), lack of quality assurance practices (68%) and lack of internal security policies (64%).
Putting Mobile Apps at Risk
65% said mobile app security is sometimes put at risk due to customer demand or need. Cross-site scripting (XSS) is deemed to be a major threat; 54% said XSS through mobile apps will increase in the next 12 months.
Scope of Mobile App Security Challenge
61% said their organizations will need to address the growing risk of malware-infected mobile apps. Only 29% said their organization has ample resources to do so.
Level of Difficulty in Securing Mobile Apps
A full 77% said securing mobile apps is hard, versus only 7% that said it was easy. Only 41% of respondents said their organizations have sufficient mobile app security expertise, and only 14% rate their effectiveness as high.
Use of Tools for Scanning for Vulnerabilities
About a third (33%) admitted their organizations do not scan for vulnerabilities. Yet, 61% said data leakage is a real problem.
Too Little Mobile App Testing
Less than half said they test apps. Of the 46% that do test, 30% report discovering flaws.
Frequency of Mobile App Testing
Only 11% of internally developed apps are tested every time code changes, versus 23% for purchased or outsource apps.
Mobile Application Use Policies
Nearly four in 10 (39%) said employees can use mobile apps on corporate devices, while 55% said they can use them on their own devices. Just over half (55%) report their organization does not have a mobile app use policy.
The Mobile App Security Budget Mismatch
An average of $34 million is spent annually on mobile app development, but only 5.5%, or $2 million, is allocated to mobile app security. Nevertheless, 60% said mobile app security is a high priority.