Privacy and security analysis of cryptocurrency mobile applications

Ashish Rajendra Sai Lero, Jim Buckley Lero, Andrew Le Gear

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Subsequent to the introduction of Bitcoin, the field of cryptocurrency has seen unprecedented growth. Mobile applications known as wallets often facilitate user interaction to these cryptocurrencies. With a perceived real world value these wallets are a target for attackers. Unlike mainstream financial services applications, cryptocurrency wallets are not subject to the same stringent security requirements of their regulated counterparts. In this paper, we examine the security profiles of commonly used Android cryptocurrency applications. We examine these applications for common vulnerabilities outlined by OWASP mobile top 10. We establish a baseline for our tests by evaluating commonly used banking and trading applications. We compare the results from our baseline test and establish the state of security provided by cryptocurrency wallet applications. The paper also examines the possible privacy implications of mobile applications. We report that the conventional financial services applications are only marginally better than cryptocurrency application in security provisions but they provide greater privacy.

Original languageEnglish
Title of host publication2019 5th International Conference on Mobile and Secure Services, MOBISECSERV 2019
EditorsSelwyn Piramuthu, Pascal Urien
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9781538677001
DOIs
Publication statusPublished - 10 Apr 2019
Event5th International Conference on Mobile and Secure Services, MOBISECSERV 2019 - Miami Beach, Miami, United States
Duration: 2 Mar 20193 Mar 2019

Publication series

Name2019 5th International Conference on Mobile and Secure Services, MOBISECSERV 2019

Conference

Conference5th International Conference on Mobile and Secure Services, MOBISECSERV 2019
Country/TerritoryUnited States
CityMiami Beach, Miami
Period2/03/193/03/19

Keywords

  • Cryptocurrency
  • Owasp mobile
  • Security
  • Smartphone application

Fingerprint

Dive into the research topics of 'Privacy and security analysis of cryptocurrency mobile applications'. Together they form a unique fingerprint.

Cite this