CSA unveils portal for developers to test mobile app safety

Apps will be assessed for indicators like malicious behaviour, code security issues

- Sarah Koh

Mobile app developers can now use an online tool to identify and fix security weaknesses in products before they are launched, to prevent cyber criminals from conducting phishing and malware attacks.

The Safe App Portal was launched on Oct 22, and the pilot project will last for the next six months, said the Cyber Security Agency of Singapore (CSA) on Oct 22.

Apps uploaded on the portal will be scanned for safety and security risks, and assessed for indicators of malicious behaviour, uncommon permission requests and code security issues.

A report provided to the developer will include recommendations for remediation, said CSA, adding that each scanned app will receive a colour-coded safety rating.

Green indicates minimal risks found with no malicious indicators detected, while yellow indicates some suspicious behaviours or notable weaknesses.

Red indicates strong signs of malicious traits and critical security issues, and that remediation is strongly advised.

Such a tool is necessary owing to a lack of resources for some software development firms, and a knowledge gap between developers and cyber-security experts on the importance of app safety, said experts on the second day of Singapore International Cyber Week on Oct 22. “A lot of smaller development shops don’t have dedicated security teams, so that is a big problem,” said Mr Eugene Liderman, Google's director of product for Android security and privacy, during a panel discussion on mobile security, at the Sands Expo and Convention Centre.