The emergence of mobile technology has significantly advanced the banking sector in terms of how consumers interact with their banks and manage their finances. The accessibility and ease of financial services have been improved by the switch from desktop banking to mobile banking. Mobile banking has a lot of advantages, but it also has security concerns. Illegal access to personal and financial information often occurs due to lapses in mobile security. In recent years, we have worked with banks from 10 countries and systematically analyzed 28 of their apps. We found several vulnerabilities in these apps by manual code reviews and by conducting 11 types of attacks. We then proposed and applied adequate security measures to protect these apps. In this paper, we report our experience and practice of securing these Android apps.

Vikas K. Malviya

Singapore Management University

India

Phong Phan

i-Sprint Innovations Pte. Ltd

Yan Naing Tun

Singapore Management University

Albert Ching

i-Sprint Innovations Pte. Ltd

Lwin Khin Shar

Singapore Management University

Singapore