Vulnerability Analysis of Digital Banks’ Mobile Applications

PV Falade, GB Ogundele

Abstract


There is a rapid increase in the number of mobile banking applications users due to an increase in smart mobile devices. Mobile banking is a financial transaction and service offered through mobile devices. Almost all financial institutions now provide mobile banking services to their customers. However, the security of mobile banking applications is of huge concern because of the amount of personal data and information they collect. If an attacker gets hold of personal information, they can access bank payment or card accounts. This research aims to analyze the vulnerability of the UK digital banks’ applications to identify vulnerabilities in the apps and proffer countermeasures that can help improve the security of the bank applications. Androbugs, a vulnerability scanner, was used to analyze the vulnerability of six digital banks’ android applications. Starling, Monese, Atom bank, Transferwise, Monzo, and Revolut were scanned. All the scanned digital banks’ applications have vulnerabilities; however, some have more vulnerabilities than others. For example, Revolut’s mobile application has the highest number of identified vulnerabilities, while the Starling mobile application has the least identified vulnerabilities. Therefore, there is a need for more security in the digital banks’ applications as well as other mobile banking applications.

Full Text:

PDF

References


ARGAW, B. (2018). Security Issues in Mobile Banking Service in Ethiopia. 6–10.

Bakar, R. A., Aziz, N. A., Muhammud, A., & Muda, M. (2017). Perceived Ease of Use, Security and Privacy of Mobile Banking. International Journal of Business and Social Research, 2(1), 56–62.

Bucko, J. (2017). Security of smart banking applications in Slovakia. Journal of Theoretical and Applied Electronic Commerce Research, 12(1), 42–52. https://doi.org/10.4067/S0718-18762017000100004

Chen, S., Fan, L., Meng, G., Su, T., Xue, M., Xue, Y., Liu, Y., & Xu, L. (2020). An empirical assessment of security risks of global android banking apps. Proceedings - International Conference on Software Engineering, 1310–1322. https://doi.org/10.1145/3377811.3380417

Chernenko, P. R., & Orlova, M. M. (2020). Security Vulnerabilities in Android OS Applications. Visnyk of Vinnytsia Politechnical Institute, 150(3), 43–50. https://doi.org/10.31649/1997-9266-2020-150-3-43-50

Content provider basics. (2021). Developers. https://developer.android.com/guide/topics/providers/content-provider-basics

Deloitte. (2020). The DNA of Digital Challenger Banks.

Digital.ai. (2021). A new approach to securing mobile banking apps.

El Janati El Idrissi, N., Orhanou, G., Kouraogo, Y., & Zkik, K. (2017). Security model on mobile banking application: attack simulation and countermeasures. International Journal of Intelligent Enterprise, 4(1/2), 155. https://doi.org/10.1504/ijie.2017.10008161

Garrett, J. (2011). Mobile Banking security. Credit Union Magazine, 77(11), 24–28. http://search.ebscohost.com/login.aspx?direct=true&db=buh&AN=67298352&site=ehost-live

Hayikader, S., Hadi, F. N. H. A., & Ibrahim, J. (2016). Issues and security measures of mobile banking apps. International Journal of Scientific and Research Publications, 6(1), 36–41. http://irep.iium.edu.my/53522/

Intents and Intent Filters. (2022). Developers. https://developer.android.com/guide/components/intents-filters

Kumar, C. (2020). 11 Mobile App Scanner to Find Security Vulnerabilities. https://geekflare.com/mobile-app-security-scanner/

Lin, Y.-C. (2015). AndroBugs Framework: An Android Application Secrity Vulnerability Scanner. 1–14.

Luvanda, A. (2014). Proposed Framework for Securing Mobile Banking Applications from Man in the Middle Attacks. 4(12), 20–28.

Markiewicz, M. (2018). Android Security Analysis Tools, part two - DIVA app and AndroBugs. https://www.netguru.com/blog/android-security-analysis-tools-part-two-androbugs

Nilsson, A., & Lehmann, S. (2020). Make Banking Simple Again. 1–57.

Nwoduh, U. J. (2019). Development of an Enhanced Mobile Banking Security : Multi- Factor Authentication Approach. International Journal of Electrical and Telecommunication System Research, 10, 2017–2019.

Palma, F., Realista, N., Serrao, C., Nunes, L., Oliveira, J., & Almeida, A. (2020). Automated security testing of Android applications for secure mobile development. Proceedings - 2020 IEEE 13th International Conference on Software Testing, Verification and Validation Workshops, ICSTW 2020, 222–231. https://doi.org/10.1109/ICSTW50294.2020.00046

PwC. (2018). How to seize the Open Banking opportunity. 1–52. https://www.pwc.co.uk/industries/financial-services/insights/seize-open-banking-opportunity.html

Szczepanik, M., & Jóźwiak, I. (2018). Security of mobile banking applications. Advances in Intelligent Systems and Computing, 635(January 2006), 412–419. https://doi.org/10.1007/978-3-319-64474-5_35


Refbacks

  • There are currently no refbacks.