APP Reinforcement: Helping Mobile Application Security and Compliance

Recently, the Ministry of Industry and Information Technology released the second batch of App (SDK) lists that infringe on user rights and interests in 2023. 55 Apps were notified due to issues such as coercion, frequent, and excessive requests for permissions. This move further highlights the importance of compliance for APP development.

According to the notification from the Ministry of Industry and Information Technology, the reported apps have some problems that are difficult for consumers to detect, such as frequent self-starting and associated startup, out-of-scope rights claims, and insufficient information on the application distribution platform, etc., which poses a threat to user security and safety. Privacy brings risks. In addition, according to statistics from the Ministry of Industry and Information Technology on Apps that infringed on user rights from 2019 to 2023, a total of 2,142 Apps/SDKs were punished. These Apps mainly collected and used users’ personal information in violation of regulations and made unreasonable requests. Issues such as user permissions and barriers to user account logout have had a considerable impact on users’ lives and work.

Faced with this situation, the Ministry of Industry and Information Technology has actively strengthened supervision, issued multiple notices and guidance on infringement of user rights, and dealt with violations in accordance with laws and regulations such as the Cybersecurity Law and the Personal Information Protection Law. Crack down and punish. This measure aims to protect the privacy and legitimate rights and interests of users and maintain a good online environment.

Compliance has become a key factor in the development process of APP. For APP developers, compliance means strengthening the protection of user data and taking appropriate security measures and technical means to ensure the security of user privacy. In addition, it is also necessary to comply with relevant laws and regulations, clarify user permissions and the purpose of information collection, and promptly update privacy terms and user agreements to provide users with full transparency and choice.

 In order to further improve App compliance and enhance App security, 58.com App deployed Dingxiang App for reinforcement. Dingxiang App reinforcement can conduct security testing on existing applications, discover risk vulnerabilities in applications and carry out targeted repairs and rectifications, protect sensitive data, code obfuscation, code integrity, memory data, etc., and avoid system vulnerabilities from the source. Regarding the security impact caused by the application itself, prevent data information leakage and ensure App security. It can also provide mobile application operation security monitoring for Apps, conduct real-time monitoring of terminal equipment, operating environment, and operating behaviors when mobile applications are running, and help Apps establish a security system for monitoring, early warning, blocking, and traceability of runtime risks.

58.com resolutely protects user information security. Through risk control work such as governance mechanism process optimization, identity classification control mechanism, strengthening risk warning detection, improving algorithm identification capabilities, user ban resource penalties, and warnings for high-risk and easy-to-cheat users, 58.com has carried out risk control and early warning in aspects such as management and early warning. worked hard and achieved good results. It not only subtly improves users' information security awareness, but also helps enterprises and individuals save worry and effort in ensuring information security, and builds a comprehensive and thorough "security protection network" across the entire platform.

 

Guess you like

Origin blog.csdn.net/dingxiangtech/article/details/131766003