Government Mobile Apps Security Assessment & Strategy
Project 3: Government Mobile Apps Security Assessment & Strategy
For this research report you will research and then present your findings about cybersecurity issues specific to mobile applications. You will also provide a set of recommendations for best practices (your “strategy”) for security architectures and designs for mobile apps.
Mobile applications are important because they allow citizens and other stakeholders to access information and services through the federal government’s digital government initiatives. For more information about requirements to provide mobile friendly websites and mobile apps see this blog posting from CIO.GOV https://www.cio.gov/2018/08/13/design-accessibility.html and the text of the Connected Government Act Public Law 115-114 https://www.congress.gov/115/plaws/publ114/PLAW-115publ114.pdf
Note: this assignment requires inclusion of diagrams or graphics which help to explain the information provided in your analysis and strategy. You are not required to create these on your own. Instead, you should look for useful graphics / diagrams in the readings and use those to support your work. You must cite the source for each piece of artwork used in your project. Put a figure caption under the diagram or chart and then place the in-text citation at the end of the caption. See the example at the end of this file.
1. Review the Weekly readings.
2. Review recent changes in US Laws regarding the requirement for mobile friendly government websites.
3. Research the “best” of federal mobile apps to see examples of the type of apps that other agencies have created in the past.
a. 19 of the Coolest Government Mobile Apps https://www.govloop.com/community/blog/cool-gov-mobile-apps/
b. 10 Most Entertaining Government Mobile Apps https://www.govloop.com/community/blog/10-most-entertaining-government-mobile-apps/
c. 3 Innovative Ways Agencies are Leveraging Mobile Apps http://fedscoop.com/great-government-mobile-apps
4. Research the federal government’s perspective on mobile app security architectures and design recommendations. Here are three sources to help you get started:
a. App Developers: Start with Security
b. Mobile Security Reference Architecture
c. How to build a secure mobile app: 10 tips
5. Research industry recommendations for mobile app security. Begin with the following sources:
a. OWASP Mobile Security Project https://www.owasp.org/index.php/OWASP_Mobile_Security_Project
b. Top 10 Mobile Risks (click on tab) https://www.owasp.org/index.php/OWASP_Mobile_Security_Project#tab=Top_10_Mobile_Risks
c. Mobile app security: Always keep the back door locked http://arstechnica.com/security/2013/02/mobile-app-security-always-keep-the-back-door-locked/
6. Find five or more best practice recommendations for ensuring the security of mobile apps. These recommendations must include security for the platform (mobile device), the data on the device, and the transmission path between the device and the mobile application server. Your focus should be upon recommendations which can be implemented as part of a strategy for reducing risk.