移动应用安全防护技术研究

本文首先分析了移动应用的安全现状，提出了移动应用安全评估方法，包括客户端安全评估、服务器安全评估和业务流程安全评估，最后给出了移动应用典型安全漏洞及其检查方法与加固建议，包括敏感数据暴露、鉴权机制缺陷、代码保护不足、公共组件漏洞和应用配置错误。

The Research of the Security Technology on Mobile Applications

This paper analyzes the security status of mobile applications, proposes the mobile application security assessment method, including the client security, server security and business process security. Finally, it gives the mobile application typical security vulnerabilities and examination methods and suggestions for the strengthening, including sensitive data exposed, defects of authentication mechanism, lack of code protection, vulnerabilities of public components and errors of application configuration.