Blogs

Kuldeep Shinde

Kuldeep holds an Engineering degree in Electronics and is also a C-Dac-Wimc certified professional. He is currently engaged with e-Zest as a Solutions Analyst. Having 4 years of experience in IT, Kuldeep specializes in Mobile Application Development and Consultancy. He currently works in technologies such as Mobile applications, Hybrid Mobile Application Development, Kony, iOS and Android. He spends most of his leisure time in activities such as reading, trekking and watching movies.

Recent Posts by Kuldeep Shinde:

Mobile app security: Introduction

Mobile application security is nearly zero today.

Mobile technology has been the next big innovation that has been driving tremendous benefit and value in IT space after web. Every business is trying to get this smart solution on their finger tips for deeper reach. The disruption has been huge in every domain right from banking, retail to health sector. But as these solutions are coming down on smart mobile devices the current IT world is rarely bothered about the amount of private data store shared on mobile phones.

Over that, barely any of the innovation agencies are thinking about security of the personal and private data that has started residing on the mobile devices. The trend is pretty much the same as it was for initial times of dot-com boom, where solutions were more focused on experiences, engagement and adoption and very little on the security breaches.

Going through the stats available on internet, the 2016 report on App security from a leading institution on IT security says that 90% of app had major security vulnerabilities. More concerning about this survey is, even the consumer in the space fail to realise this apps are not safe, which means even the awareness of security around mobile application is very low at end user level.

Even though, the security critical tech-organizations are extending their conventional security frameworks for web to mobile. OWASP (Open Web Application Security Project) a non-profit organisation took up the responsibility of differentiating and standardising security risks for mobile channel.

OWASP research has come up with top ten mobile risks as stated below:
  •     M1: Weak Server Side Controls
  •     M2: Insecure Data Storage
  •     M3: Insufficient Transport Layer Protection
  •     M4: Unintended Data Leakage
  •     M5: Poor Authorization and Authentication
  •     M6: Broken Cryptography
  •     M7: Client Side Injection
  •     M8: Security Decisions Via Untrusted Inputs
  •     M9: Improper Session Handling
  •     M10: Lack of Binary Protections

Even though every risks stated above are important for security, I would like to focus on discussing the top three important points which have lower awareness even being crucial for security and at last the 10th for binary protection extending it for defensive programming.

Topics: Mobile security App security

Apple Pay – Revolutionizing Currency Digitalization

Currency digitalization is a part of this century revolution. We have moved out from dealing with bills and papers and moved on to e-commerce, Digital Cards for debit and credit. Meanwhile the technology leaders are accelerating to push people with more easier, advanced and digital way to deal with transactions. Near Field Communication (NFC) has been here for a long time now. But the common reluctance of penetrating in a new way for transactions was observed. The adaption rate had been quite slow.

Topics: Mobile Development Apple Pay Currency digitalization Technology

e-Zest Solutions is digital experience engineering company with facilities in the United States (Detroit & San Jose), Germany (Hannover), United Kingdom (London UK) and India (Pune) with global clientele. Our services include custom software development, offshore software development, UX consulting, BigData, Managed cloud Services (Azure & AWS), SharePoint consulting/Migration, Enterprise Java application development, Automated software testing services.