Difference between revisions of "Projects/OWASP Mobile Security Project - Top Ten Mobile Risks"

From OWASP
Jump to: navigation, search
(About this list)
Line 17: Line 17:
 
|}
 
|}
 
</center>
 
</center>
== About this list  ==
+
= The Mobile Top Ten =
 
In 2013, we polled the industry for new vulnerability statistics in the field of mobile applications. What you see here is a result of that data and a representation of the mobile application threat landscape.  
 
In 2013, we polled the industry for new vulnerability statistics in the field of mobile applications. What you see here is a result of that data and a representation of the mobile application threat landscape.  
  
Line 33: Line 33:
 
== 2015 Mobile Top Ten Analysis Results ==
 
== 2015 Mobile Top Ten Analysis Results ==
 
Are you interested in what the data collection for the 2015 list looks like?  Check out the final synthesis... [[Media:2015 Data Synthesis Results.pptx]]
 
Are you interested in what the data collection for the 2015 list looks like?  Check out the final synthesis... [[Media:2015 Data Synthesis Results.pptx]]
 +
 +
We are fleshing out the new Mobile Top Ten at [Projects/OWASP_Mobile_Security_Project_-2015_Scratchpad]. Have a look.
  
 
Here is the original raw data: [[https://www.dropbox.com/sh/d143o6tbkdx4w4l/AAAQlpmnCpHCgiBqZkgXPSTKa?dl=0 Dropbox Data]]
 
Here is the original raw data: [[https://www.dropbox.com/sh/d143o6tbkdx4w4l/AAAQlpmnCpHCgiBqZkgXPSTKa?dl=0 Dropbox Data]]

Revision as of 11:45, 29 June 2015


The Mobile Top Ten

In 2013, we polled the industry for new vulnerability statistics in the field of mobile applications. What you see here is a result of that data and a representation of the mobile application threat landscape.


Mobile Top 10 2014.png

Our goals for the 2014 list included the following:

  • Updates to the wiki content; including cross-linking to testing guides, more visual exercises, etc;
  • Generation of more data; and
  • A PDF release.

This list has been finalized after a 90-day feedback period from the community. Based on feedback, we intend on releasing a Mobile Top Ten 2015 list following a similar approach of collecting data, grouping the data in logical and consistent ways.

Feel free to visit the mailing list as well!

2015 Mobile Top Ten Analysis Results

Are you interested in what the data collection for the 2015 list looks like? Check out the final synthesis... Media:2015 Data Synthesis Results.pptx

We are fleshing out the new Mobile Top Ten at [Projects/OWASP_Mobile_Security_Project_-2015_Scratchpad]. Have a look.

Here is the original raw data: [Dropbox Data]

Top 10 Mobile Risks - Final List 2014


Project Leads, Credit, and Contributions


Project Methodology


Archive

  • The list below is the OLD release candidate v1.0 of the OWASP Top 10 Mobile Risks.  This list was initially released on September 23, 2011 at Appsec USA.