Implementación de la Capa de Seguridad en el Ciclo de Vida del Desarrollo de Aplicaciones Móviles

Abstract

Abstract: The large number of insecure mobile applications published in digital app stores represents one of the most significant software security problems today. This issue is addressed in this research to raise awareness and propose measures to help mitigate it. Therefore, first, the fundamental components involved in the development of a mobile application and specific security aspects are identified. From this analysis, it is concluded that security in mobile applications is not implemented as an individual layer but as a parallel process to the mobile application development lifecycle, phase by phase. Next, a framework or guide is proposed, which, when implemented, results in a mobile application with adequate security. This proposal is tested on real mobile applications, allowing for a comparison of their resulting security. Finally, the results indicate that implementing security from the project's inception ensures adequate security, and utilizing the developed proposal facilitates this security implementation process.