Difference between revisions of "Projects/OWASP Mobile Security Project - Top Ten Mobile Risks"

From OWASP
Jump to: navigation, search
Line 18: Line 18:
 
</center>
 
</center>
 
=== About this list  ===
 
=== About this list  ===
 
 
In 2013 we polled the industry for new vulnerability statistics in the field of mobile applications. What you see here is a result of that data and a representation of the mobile application threat landscape.  
 
In 2013 we polled the industry for new vulnerability statistics in the field of mobile applications. What you see here is a result of that data and a representation of the mobile application threat landscape.  
  
  
 
Our road-map for 2014 includes:
 
Our road-map for 2014 includes:
 
+
[[File:2014-01-26 20-23-29.png|right|550px]]
 
* More updates to the wiki content; including cross-linking to testing guides, more visual exercises, etc.
 
* More updates to the wiki content; including cross-linking to testing guides, more visual exercises, etc.
 
* A PDF release.
 
* A PDF release.
Line 32: Line 31:
  
 
=== Top 10 Mobile Risks - Re-Release Candidate 2014 v1.0 ===
 
=== Top 10 Mobile Risks - Re-Release Candidate 2014 v1.0 ===
[[File:2014-01-26 20-23-29.png|right|550px]]
 
 
*[[Mobile_Top_10_2014-M1|M1: Weak Server Side Controls ]]  
 
*[[Mobile_Top_10_2014-M1|M1: Weak Server Side Controls ]]  
 
*[[Mobile_Top_10_2014-M2|M2: Insecure Data Storage ]]
 
*[[Mobile_Top_10_2014-M2|M2: Insecure Data Storage ]]

Revision as of 01:42, 30 January 2014


About this list

In 2013 we polled the industry for new vulnerability statistics in the field of mobile applications. What you see here is a result of that data and a representation of the mobile application threat landscape.


Our road-map for 2014 includes:

2014-01-26 20-23-29.png
  • More updates to the wiki content; including cross-linking to testing guides, more visual exercises, etc.
  • A PDF release.


This list is still a work in progress. We are small group doing this work and could use more help! If you are interested, please contact one of the project leads.


Top 10 Mobile Risks - Re-Release Candidate 2014 v1.0


Additional Information

  • The list below is the OLD release candidate v1.0 of the OWASP Top 10 Mobile Risks.  This list was initially released on September 23, 2011 at Appsec USA.