Russian Federation
This article analyzes the challenges of ensuring the security of users' personal data in mobile applications. It examines the main types of personal data processed, typical information security threats, and vulnerabilities of mobile platforms. Organizational and technical security measures are analyzed. Particular attention is paid to ensuring mobile applications comply with personal data protection laws. Recommendations for developers on designing secure mobile applications are provided.
personal data, mobile applications, security, privacy, encryption, access control, information security
1. Heys D., Kappa F., Le-Khak N.A. Problemy bezopasnosti i konfidencial'nosti, svyazannye s mobil'nymi prilozheniyami // Zhurnal informacionnoy bezopasnosti i prilozheniy // Journal of Information Security and Applications, 2020. URL: https://www.sciencedirect.com/science/article/pii/S2666954420300016
2. Arapov D.V., Kuricyn V.A., Skorobogatov S.A. Avtomatizirovannaya mobil'naya sistema prinyatiya resheniy dlya ispol'zovaniya v special'noy medicine // Modelirovanie sistem i processov. – 2024. – T. 17, № 3. – S. 7–16.
3. Evropeyskoe agentstvo po kiberbezopasnosti (ENISA). Konfidencial'nost' i zaschita dannyh v mobil'nyh prilozheniyah, 2017. URL: https://www.enisa.europa.eu/sites/default/files/publications/WP2017%20O-2-2-4%20GDPR%20Mobile.pdf
4. Positive Technologies. Uyazvimosti i ugrozy mobil'nyh prilozheniy, 2019. URL: https://ptsecurity.com/research/analytics/mobile-application-security-threats-and-vulnerabilities-2019/
5. Anderson R. Inzheneriya bezopasnosti: sozdanie nadezhnyh raspredelennyh sistem, 2020. 1232 s.
6. Obschiy reglament po zaschite dannyh (GDPR): Reglament (ES) 2016/679 Evropeyskogo parlamenta i Soveta ot 27 aprelya 2016 g. o zaschite fizicheskih lic pri obrabotke personal'nyh dannyh i o svobodnom obraschenii takih dannyh. Oficial'nyy zhurnal Evropeyskogo soyuza, 2016.
7. Ross Dzh., Snayder P. Bezopasnost' mobil'nyh prilozheniy, 2019. 368 s.
