A team of researchers has developed a tool to identify security<\/a> and privacy risks associated with Covid-19 contact tracing apps<\/a>. 一组研究人员开发了一种工具来识别安全和隐私风险Covid-19接触者追踪应用。
\"COVIDGuardian\", the first automated security<\/a> and privacy assessment tool, tests contact tracing apps for potential threats such as malware, embedded trackers and private information leakage.
Using the \"COVIDGuardian\" tool, cybersecurity experts from Queen Mary University of London<\/a> assessed 40 Covid-19<\/a> contact tracing apps that have been employed worldwide for potential privacy and security threats.
They found that 72.5 per cent of the apps use at least one insecure cryptographic algorithm.
\"Three quarters of apps contained at least one tracker that reports information to third parties such as Facebook Analytics or Google Firebase. While most apps were free of malware, the Kyrgyzstan app 'Stop Covid-19<\/a> KG' was discovered to have malware,\" the researchers said in a paper scheduled to be presented at the virtual International Conference on Software Engineering in May.
\"With the pandemic there was a rapid need for contact tracing apps to support efforts to control the spread of Covid-19. Unsurprisingly we found that this had resulted in some relatively mainstream security bugs being introduced worldwide,\" said Dr Gareth Tyson, Senior Lecturer at Queen Mary University of London<\/a>.
Some of the most common risks relate to the use of out-of-date cryptographic algorithms and the storage of sensitive information in plain text formats that could be read by potential attackers.
\"Through COVIDGuardian we've produced a tool that can be used by developers to discover and fix potential weaknesses in their apps and share guidelines that will help to ensure user privacy and security is maintained,\" Tyson said.
To support this work the researchers also performed a survey involving over 370 individuals to understand the likelihood that they would use a contact tracing app and highlight concerns around their use.
The results suggested that the privacy and accuracy of contact tracing apps had the biggest impact on whether individuals would use the app.
<\/p><\/body>","next_sibling":[{"msid":81242749,"title":"Google fires 150 game developers hired for Stadia: Report","entity_type":"ARTICLE","link":"\/news\/google-fires-150-game-developers-hired-for-stadia-report\/81242749","category_name":null,"category_name_seo":"telecomnews"}],"related_content":[{"msid":"81240583","title":"New tools identified","entity_type":"IMAGES","seopath":"tech\/news\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps\/new-tools-identified","category_name":"New tool spots to identify security and privacy issues with COVID-19 tracing apps","synopsis":false,"thumb":"https:\/\/etimg.etb2bimg.com\/thumb\/img-size-119856\/81240583.cms?width=150&height=112","link":"\/image\/tech\/news\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps\/new-tools-identified\/81240583"}],"msid":81242769,"entity_type":"ARTICLE","title":"New tool spots to identify security and privacy issues with COVID-19 tracing apps","synopsis":"A team of researchers has developed a tool to identify security and privacy risks associated with Covid-19 contact tracing apps.","titleseo":"telecomnews\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps","status":"ACTIVE","authors":[],"Alttitle":{"minfo":""},"artag":"IANS","artdate":"2021-02-27 13:46:14","lastupd":"2021-02-27 13:47:53","breadcrumbTags":["Covid tracing apps","security","london","covid-19","covid-19 contact tracing apps","Queen Mary University of London","MVAS\/Apps"],"secinfo":{"seolocation":"telecomnews\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps"}}" data-authors="[" "]" data-category-name="" data-category_id="" data-date="2021-02-27" data-index="article_1">
“COVIDGuardian”,第一个自动化安全接触者追踪和隐私评估工具,测试应用程序等潜在威胁的恶意软件,嵌入式追踪者和私人信息泄漏。
使用“COVIDGuardian”工具,网络安全专家伦敦大学玛丽皇后评估40Covid-19接触者追踪的应用程序已经使用全球潜在的隐私和安全威胁。
他们发现72.5%的应用程序使用至少一个不安全的密码算法。
”大流行有一个快速接触者追踪应用程序需要支持努力控制Covid-19的传播。毫无疑问我们发现这已经导致一些相对主流的安全漏洞被介绍在世界范围内,“加雷思泰森博士说,玛丽皇后大学高级讲师伦敦。
一些最常见的风险与使用过时的加密算法和存储敏感信息的纯文本格式,可以读到潜在的攻击者。
“通过COVIDGuardian产生一个工具,我们可以通过开发人员发现并解决潜在的弱点在他们的应用程序和共享指南将有助于确保用户隐私和安全维护,“泰森说。
支持这项工作研究人员还进行了一项调查涉及370多个人理解的可能性,他们将使用接触者追踪应用和突出问题在他们的使用。
结果表明,接触者追踪应用的隐私和准确性产生最大影响个体是否会使用应用程序。
A team of researchers has developed a tool to identify security<\/a> and privacy risks associated with Covid-19 contact tracing apps<\/a>.
\"COVIDGuardian\", the first automated security<\/a> and privacy assessment tool, tests contact tracing apps for potential threats such as malware, embedded trackers and private information leakage.
Using the \"COVIDGuardian\" tool, cybersecurity experts from Queen Mary University of London<\/a> assessed 40 Covid-19<\/a> contact tracing apps that have been employed worldwide for potential privacy and security threats.
They found that 72.5 per cent of the apps use at least one insecure cryptographic algorithm.
\"Three quarters of apps contained at least one tracker that reports information to third parties such as Facebook Analytics or Google Firebase. While most apps were free of malware, the Kyrgyzstan app 'Stop Covid-19<\/a> KG' was discovered to have malware,\" the researchers said in a paper scheduled to be presented at the virtual International Conference on Software Engineering in May.
\"With the pandemic there was a rapid need for contact tracing apps to support efforts to control the spread of Covid-19. Unsurprisingly we found that this had resulted in some relatively mainstream security bugs being introduced worldwide,\" said Dr Gareth Tyson, Senior Lecturer at Queen Mary University of London<\/a>.
Some of the most common risks relate to the use of out-of-date cryptographic algorithms and the storage of sensitive information in plain text formats that could be read by potential attackers.
\"Through COVIDGuardian we've produced a tool that can be used by developers to discover and fix potential weaknesses in their apps and share guidelines that will help to ensure user privacy and security is maintained,\" Tyson said.
To support this work the researchers also performed a survey involving over 370 individuals to understand the likelihood that they would use a contact tracing app and highlight concerns around their use.
The results suggested that the privacy and accuracy of contact tracing apps had the biggest impact on whether individuals would use the app.
<\/p><\/body>","next_sibling":[{"msid":81242749,"title":"Google fires 150 game developers hired for Stadia: Report","entity_type":"ARTICLE","link":"\/news\/google-fires-150-game-developers-hired-for-stadia-report\/81242749","category_name":null,"category_name_seo":"telecomnews"}],"related_content":[{"msid":"81240583","title":"New tools identified","entity_type":"IMAGES","seopath":"tech\/news\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps\/new-tools-identified","category_name":"New tool spots to identify security and privacy issues with COVID-19 tracing apps","synopsis":false,"thumb":"https:\/\/etimg.etb2bimg.com\/thumb\/img-size-119856\/81240583.cms?width=150&height=112","link":"\/image\/tech\/news\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps\/new-tools-identified\/81240583"}],"msid":81242769,"entity_type":"ARTICLE","title":"New tool spots to identify security and privacy issues with COVID-19 tracing apps","synopsis":"A team of researchers has developed a tool to identify security and privacy risks associated with Covid-19 contact tracing apps.","titleseo":"telecomnews\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps","status":"ACTIVE","authors":[],"Alttitle":{"minfo":""},"artag":"IANS","artdate":"2021-02-27 13:46:14","lastupd":"2021-02-27 13:47:53","breadcrumbTags":["Covid tracing apps","security","london","covid-19","covid-19 contact tracing apps","Queen Mary University of London","MVAS\/Apps"],"secinfo":{"seolocation":"telecomnews\/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps"}}" data-news_link="//www.iser-br.com/news/new-tool-spots-to-identify-security-and-privacy-issues-with-covid-19-tracing-apps/81242769">
评论
现在评论 阅读评论(1)所有评论
找到这个评论进攻?
下面选择你的理由并单击submit按钮。这将提醒我们的版主采取行动