Primerjava varnosti aplikacij na tržiščih z mobilnimi aplikacijami

• Main Author: Školc, Gašper
• Other Authors: Markelj, Blaž
• Format: Bachelor Thesis
• Language: Slovenian
• Published: G. Školc] 2016
• Subjects: mobilne naprave; mobilne aplikacije; varnost; informacijska varnost; grožnje; diplomske naloge; Mobile marketplaces; mobile applications; security; threats; mobile device users; mobile devices; info:eu-repo/classification/udc/004.056(043.2); sami
• Online Access: https://dk.um.si/IzpisGradiva.php?id=62119; https://dk.um.si/Dokument.php?id=108469&dn=; http://www.cobiss.si/scripts/cobiss?command=DISPLAY&base=cobib&rid=3251434&fmt=11

Dan danes je uporaba mobilnih naprav in s tem tržišč z mobilnimi aplikacijami postala nujnost. Moderna tehnologija se je razvila v taki meri, da so namizni računalniki že skoraj preteklost, nadomeščajo jih prenosni računalniki, pametni mobilni telefoni in druge mobilne naprave, ki pa mnogokrat potrebujejo tržišča z mobilnimi aplikacijami, za omogočanje raznih funkcij, ki jih te naprave ponujajo. Diplomska naloga opisuje razlike med uradnimi tržišči z mobilnimi aplikacijami in tržišči tretjih oseb, in odkriva različne varnostne luknje v enih in drugih. Poleg mobilne tehnologije pa se z veliko hitrostjo razvija tudi kibernetska kriminaliteta, ki napadalcem omogoča izkoriščanje vseh aspektov mobilne naprave. Najpogosteje je izkoriščeno uporabnikovo zaupanje, zato diplomsko delo opisuje, na kakšen način je lahko uporabnikovo zaupanje izkoriščeno, ter opisuje nekaj groženj, ki pretijo mobilnim napravam in občutljivim podatkom. Poleg osnovnih groženj, diplomsko delo govori tudi o posebnih grožnjah, ki se nanašajo na konkurenčni si platformi, Android podjetja Google, ter iOS podjetja Apple. Prav tako pa opisuje rešitve, katere potrebujejo tako razvijalci, kot uporabniki mobilnih naprav, katere lahko izvajajo sami ali z razvijalci in s tem zmanjšujejo tveganja za nastanek in uresničitev groženj. Za boljši prikaz, je v diplomskem delu, skozi nekaj primerov pokazano, kako aplikacije na tržiščih preverjajo uporabniki sami, ter primerjajo aplikacije na uradnem tržišču in tržišču tretjih oseb. Izvedena je bila raziskava med uporabniki mobilne tehnologije, kjer nas je zanimalo njihovo zaupanje v tržišča z mobilnimi aplikacijami in v mobilne aplikacije ter načini uporabe mobilnih naprav v korelaciji s podatki, ki jih na njih hranijo. Nowadays, the usage of mobile devices and with that mobile application marketplaces has become a neccessary thing. Modern technology has evolved in such proportions, that standard tabletop PC's are a thing of the past. They are being replaced by laptops, smartphones and other mobile devices, which many times need mobile application marketplaces to enable different functions, that the devices have to offer. In this thesis we describe the differences between the official marketplaces and the third-party marketplaces, different security holes in one and the other have been shown. There has been a vast increase of cyber crime beside mobile technology, which allows attackers to exploit all aspects of a mobile device. The most exploited factor is users trust, that is why in this thesis we describe, in which ways that trust can be exploited. Moreover, we describe some of the threats to mobile devices and sensitive data. Beside all of the common threats, there are some special threats to Google's Android and his rival Apple's iOS platforms, which is also described in this thesis. In addition, we describe possible solutions, which are needed by developers and mobile device users. We are using those solutions ourselves, and some are used by developers, to decrease the risk of threat realisation. In this thesis we show some examples of how to check the applications ourselves, and the comparison between an application from the official marketplace, and the one from a third party marketplace. We carried out a survey between the users of mobile technology, where we found out about their trust in the mobile marketplaces and mobile applications. We discovered in which ways users use mobile devices in correlation with the data, which they store on them.