Framework and Roadmap for Secure Design and Development of Applications in the Cloud and Mobile Ecosystem

Framework and Roadmap for Secure Design and Development of Applications in the Cloud and Mobile Ecosystem

연구 분야: Verification

학회: European Interdisciplinary Cybersecurity Conference

Mobile applications and devices became widely popular in the second decade of the 21st century, mostly driven by technologies like cloud computing, Internet of Things (IoT), blockchain, and big data, leading to and fostering very fast paced development cycles of cloud-based mobile apps, which offer enhanced convenience and accessibility for end users. However, significant security challenges remain, as cybersecurity is often overlooked in favor of a shorter time-to-market. This paper presents the Security by Design for the Cloud and Mobile Ecosystem framework, consisting of a set of tools and underlying logic aimed at helping mobile application developers build secure applications in the specific mobile and cloud ecosystem. It features a modular architecture and includes five main tools built in Python, and its outputs are enhanced through the use of ChatGPT. The paper also discusses real-world applications and presents usability evaluation results, showing the framework is effective and meets its goals.