dfs23

1. November 2023
Rethink Mobile App
Security with Build38
Combining Best-in-Class
Mobile App Self-Protection and
Threat Intelligence

2. Navigating the speed of change
Embedded Finance
Banking-as-a-Service
Buy Now Pay Later
Digital Only Banking
Peer-To-Peer Lending
Smart Contract
Digital Wallets
DeFi and Blockchain
Digital Only
Banking
TOP Fintech
Trends

3. 3
Issue: Rising Mobile App Attack Sophistication
80 apps installed
on an individual’s
mobile phone
On average 2 hours
& 51 minutes a day
on mobile apps
63% of apps contain
open-source
components with
known security
vulnerabilities
An average of 39
vulnerabilities x
vulnerable mobile
app
680% increase in
fraud transactions
originating from
mobile apps
70% of online fraud
is accomplished
through mobile
platforms
Cybercrime
damage $10
trillion by 2025*
Security know-how
shortage & continued
cost increase

4. 4
The Mobile App Security Maturity Curve
Level
of
Mobile
In-App
Security
Sophistication
Non-existent /
Unaware
Opportunistic
Mid-Grade
Compliance
Focused
Transformative
Operational
Excellence
"Why would
anyone attack our
mobile app?"
Just a bit of
security is believed
to be enough "We
are safe"
Somewhat
protected "We
have done
everything
possible"
Doing what is
expected
"Regulation
compliance is
great"
Taking risks very
seriously,
employing Threat
Intelligence
technology
"Role model,
low
susceptibility to
risk
Sources: Gartner, Forrester and Build38 client insight

5. 5
6 Steps of Continuous Mobile App Protection
Hardening
Prevention
Detection
Prediction
Govern
CC
Mobile App
Application
Logic
Protection
Library
Response
Understand your risks, know your attack
surface, uncover weak spots.
Continuously harden and personalize
the app
Minimize the attack surface, prevent
incidents.
Recognize incidents and threats, isolate
and contain them.
React to breaches, mitigate the damage,
analyze and learn.
Integrate cybersecurity into overall risk
management strategies

6. Build38 defends against a wide range of threats
Client Library
Native Code
Protection
CC
Security Enhanced
Functions
Reverse Engineering
Network sniffing, API
manipulation
Environments like
emulators and debugger
Manipulation/theft of resources
and IDs; misuse of apps as bots
Multiple Account Fraud;
Impersonation
Mobile app cloning and app
lifting
Key extraction
Rooting/Jailbreak/ Hooking
Integrity
Side Channel Attack
Replay attack - MITM
Code Manipulation x
x
x
x
x
x
x
x

7. Erik van der Zee
BuBusiness Development Director
+31620793591
Erik.vanderzee@build38.com
www.build38.com
https://www.linkedin.com/in/erik-van-der-zee-nl/
Contact