Security Testing Of Android Based Covid Tracer Applications
Narmada Kohli, Mahsa Mohaghegh · 2020 IEEE Asia-Pacific Conference on Computer Science and Data Engineering (CSDE) · 2020
Digital contact tracing application is a digital measure implemented by many countries across the globe in response to the Covid-19 outbreak. Use of applications like these present certain concerns regarding user privacy and application security. In this paper, four Covid-19 tracing applications were tested using MobSF and drozer to check for risks in the code (static analysis) and determine potential attack surfaces. The observations and findings were compiled in tabular form, including the OWASP mobile top 10 issues, as well as the CWE that were detected using MobSF. The potential attack surfaces detected using drozer were also listed.