On the Privacy, Security and Safety of Blood Pressure and Diabetes Apps - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

On the Privacy, Security and Safety of Blood Pressure and Diabetes Apps

David Aspinall
  • Fonction : Auteur
  • PersonId : 986202
Maria Wolters
  • Fonction : Auteur
  • PersonId : 924605

Résumé

Mobile health (mHealth) apps are an ideal tool for monitoring and tracking long-term health conditions. In this paper, we examine whether mHealth apps succeed in ensuring the privacy, security, and safety of the health data entrusted to them. We investigate 154 apps from Android app stores using both automatic code and metadata analysis and a manual analysis of functionality and data leakage. Our study focuses on hypertension and diabetes, two common health conditions that require careful tracking of personal health data.We find that many apps do not provide privacy policies or safe communications, are implemented in an insecure fashion, fail basic input validation tests and often have overall low code quality which suggests additional security and safety risks. We conclude with recommendations for App Stores, App developers, and end users.
Fichier principal
Vignette du fichier
337885_1_En_38_Chapter.pdf (4 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01345147 , version 1 (13-07-2016)

Licence

Paternité

Identifiants

Citer

Konstantin Knorr, David Aspinall, Maria Wolters. On the Privacy, Security and Safety of Blood Pressure and Diabetes Apps. 30th IFIP International Information Security Conference (SEC), May 2015, Hamburg, Germany. pp.571-584, ⟨10.1007/978-3-319-18467-8_38⟩. ⟨hal-01345147⟩
169 Consultations
243 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More