#United States #San Francisco #mobile applications #Application Security #App Defense Alliance

App Defense Alliance Launches Certified Products Portal

The App Defense Alliance has taken a significant step towards enhancing mobile application security with the launch of its first public directory of certified applications. This initiative is backed by tech giants Google, Meta, and Microsoft, and aims to provide a reliable resource for developers, platform operators, and users to confirm the security of mobile applications.

This new portal showcases 45 mobile applications that have been certified through the Alliance's Mobile Application Security Assessment (MASA). Alongside this, they have introduced a web application security standard known as the Cloud Application Security Assessment (CASA), along with standards for cloud configuration. Additional security assessments for AI and desktop applications are also in the pipeline, indicating the Alliance's commitment to broadening its security oversight.

The foundation of the Alliance's framework is built upon the OWASP Mobile Application Security Verification Standard (MASVS), and it is supported by a network of eight accredited testing labs. This structure aims to create a standardized approach for evaluating mobile application security, thus significantly reducing friction for developers while establishing clearer benchmarks for security evaluation by platforms and decision-makers.

According to Alex Duff, the Chair of the App Defense Alliance and Head of Platform Ecosystem Data Security at Meta, this framework is crucial for fostering industry-wide consensus on application security protocols. The certified apps portal marks a pivotal moment in offering developers a more streamlined process to achieve certification, which ultimately benefits platform operators by enabling them to evaluate security measures on a consistent basis.

Advantages of a Unified Certification Model

One of the key highlights of this initiative is the provision of a common certification recognized across various platforms. With this, developers have clearer expectations on how to attain certification and can find all certified applications in one easily accessible location. As applications increasingly integrate with AI systems, the need for robust security evaluations becomes ever more pertinent, and the Alliance is responding accordingly.

Another important aspect is the cost-benefit for developers transitioning across different platforms. Traditionally, security certification on multiple platforms incurs significant costs, but the unified approach adopted by the Alliance seeks to alleviate this financial burden. This certified products portal empowers users, enabling them to make informed decisions when selecting applications by signaling that certain security standards have been met.

Brad Ree, the Vice Chair of the App Defense Alliance and Technical Program Manager at Google, emphasized the importance of aligning industry standards and continuous collaboration to elevate overall app safety across ecosystems.

The announcement of this certified products portal is an integral component of the Alliance's goal to fortify security and build trust within the application ecosystem. By collaborating closely with security leaders from various sectors, including government, platform operators, and enterprise, the Alliance is striving to ensure a safer online environment.

Oliver Bell, Partner General Manager of Trusted Platform at Microsoft, further highlighted that the Alliance's certification provides enterprises with a consistent and credible means to assess whether applications meet essential security benchmarks. As new security challenges emerge, the necessity for shared standards and validation becomes paramount.

Conclusion

The App Defense Alliance is committed to elevating global application security through their dedicated efforts in establishing standardized certification protocols. With industry leaders such as Google, Meta, and Microsoft at its helm, the Alliance is poised to effectively navigate the evolving landscape of application security, ushering in enhanced safety measures for mobile, web, and cloud applications. Ongoing development in areas such as AI and desktop security underscores their proactive approach to the emerging challenges in the app security arena. For more information, visit appdefensealliance.org.