How to Know if an App is Secure

Heff and Forrest discuss how to know if an app is secure in this week's news.

Updated:  
October 13, 2023
News
Cybersecurity
Security Training
How to Know if an App is Secure
Quick Answer:

How can you tell if a mobile app is secure before you install it?

Check the app's age, developer reputation, data practices, and encryption details, and ask whether you actually need it.

- Red flags include vague privacy policy language, no encryption or storage location specifics, and no way to opt out or delete your data.
- Use tools like Terms of Service Didn't Read, Qualys for encryption checks, and Exodus to spot broad Android permissions.
- Follow the three-rule guideline: don't install apps you didn't seek out, update ones you keep, and remove ones you no longer need.

‍

Quick Answer: How Do You Know If an App Is Safe to Use

‍
SecurityMetrics News Episode 21 covers evaluating app safety by examining what data an app collects, using services that assess privacy policies, and defining your own threat model.

  • Covers what apps actually do with the data they collect.
  • Highlights services available to help evaluate an app's privacy policy.
  • Explains how to determine your personal or organizational threat model before trusting an app.
  • Hosted by Matthew Heffelfinger (Director of SIEM Operations) and Forrest Barth (SOC Analyst, CISSP).

‍

SecurityMetrics News Episode 21

Join us this week as Heff and Forrest discuss how to know if an app is safe.

Watch to learn more about:

  • What apps do with your data
  • Services that help you evaluate privacy policies 
  • How to determine your threat model 

Hosted by Matthew Heffelfinger (Director of SIEM Operations, GSTRT, CyRP (Pepperdine), GRCP, SSAP, ITIL4-F, GISF, PECB) and Forrest Barth (SOC Analyst, CISSP, CMNO, Security+).