Issue Details
Improper Platform Usage
mobile01 • Rank #1 in OWASP 2024
Explanation
Mobile platforms provide security features like iOS Keychain, Android Keystore, Touch ID, and Face ID. Improper usage includes storing secrets in plaintext, disabling certificate validation, or bypassing platform security controls. Attackers exploit these gaps to extract sensitive data or intercept communications.
Remedy
Apply platform security features as intended: use Keychain/Keystore for secrets, enforce biometric authentication properly, implement certificate pinning, and follow platform-specific security guidelines. Avoid bypassing built-in protections for convenience.
| Year | Rank | Category |
|---|---|---|
| 2016 | #1 | mobile01 - Improper Platform Usage |
| 2024 | #1 | mobile01 - Insecure Authentication and Session Management |