一句话：报告与10国银行合作分析28款Android应用、发现漏洞并部署AppProtect+防护的工业实践。
移动银行带来便利，但也面临个人与财务信息被非法访问的安全隐患。该工业实践论文报告了作者与来自10个国家的银行合作，系统分析其中28款 Android 应用的过程。他们通过人工代码审查和11类攻击发现多款应用中的漏洞，随后提出并应用相应的安全加固措施，并将这些措施集成到工具 AppProtect+ 中，以有效识别和阻断相关威胁。论文总结了在银行领域保护 Android 应用的经验、实践与成效。
The emergence of mobile technology has significantly advanced the banking sector in terms of how consumers interact with their banks and manage their finances. The accessibility and ease of financial services have been improved by the switch from desktop banking to mobile banking. Mobile banking has a lot of advantages, but it also has security concerns. Illegal access to personal and financial information often occurs due to lapses in mobile security. In recent years, we have worked with banks from 10 countries and systematically analyzed 28 of their apps. We found several vulnerabilities in these apps by manual code reviews and by conducting 11 types of attacks. We then proposed and applied adequate security measures to protect these apps. Finally, we added these measures to our tool named AppProtect+ to effectively identify and thwart these threats. In this paper, we report our experience and practice of securing these Android apps.
@inproceedings{MalviyaPTCS23,
title = {An Industrial Practice for Securing Android Apps in the Banking Domain},
author = {Vikas K. Malviya and Phong Phan and Yan Naing Tun and Albert Ching and Lwin Khin Shar},
booktitle = {ASE},
year = {2023},
doi = {10.1109/ase56229.2023.00057}
}