Most COVID-19 contact-tracing apps are not adequately secured

2020-06-18 11:52

Security researchers have analyzed contact-tracing mobile apps from around the globe and found that their developers have generally failed to implement suitable security and privacy protections.

In an effort to stem the spread of COVID-19, governments are aiming to provide their citizenry with contact-tracing mobile apps.

Guardsquare researchers have unpacked and decompiled 17 Android contact-tracing apps from 17 countries to see whether developers implement name obfuscation, string, asset/resource and class encryption.

Grant Goodes, Chief Scientist at Guardsquare, though made sure to note that they have not checked all existing contact-tracing apps, but that the sample they did test "Provides a window into the security flaws most contact tracing apps contain."

The looked-for protections should make it difficult for malicious actors to tamper with and "Trojanize" the legitimate apps.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/hLgWIdqWWUQ/

#covid19