An introductory guide to mobile app security testing

By Gerie Owen for SearchSoftwareQuality
Tuesday, July 20, 2021

• 2.5k
• 16
• 16
• 16
• 8
• More
• 16
• 16

A comprehensive test approach to building in quality security includes threat assessment, static and dynamic analysis during development, automated scanning and a penetration test.

Tools for mobile app security testing

It's important a team uses tools specifically geared toward mobile security.

For example, ImmuniWeb Mobile Suite offers coverage for not only mobile apps, but also the apps and servers they connect to. Zed Attack Proxy (ZAP) is widely used in the security testing industry and features th­e ability to send malicious messages for penetration testing. Micro Focus also provides a comprehensive security testing tool that enables end-to-end testing across many browsers, platforms, networks and servers. Kiuwan is an important tool in security testing because it supports static code analysis and software composition analysis, which allows for teams to implement security testing earlier in the development process.

Security testing for mobile apps is one of the most important aspects of an overall test strategy. It's important that teams begin security testing early in the software development lifecycle so they engineer security into the product. Security test coverage must be end-to-end, covering not only the application itself but also the back-end server and the flow of data. Read Full Article