Browse Definitions :
Definition

leaky app

A leaky app is a small software program – typically a mobile app – that transmits user data across the Internet.

The issue is compounded in a BYOD (bring your own device) environment, where employee devices access corporate data, and when employees use shadow IT at work: devices and software that are not supported by the company’s IT department. Many mobile apps automatically synchronize data with other devices and cloud storage services, such as Apple iCloud, Dropbox, Google Drive and Microsoft OneDrive. Unless that function is disabled, these apps can easily leak enterprise data to public clouds without the knowledge of employees, administrators or employers. According to Gartner research, the majority of mobile security breaches are the result of faulty device configuration rather than targeted attacks. 

Leaky apps were first brought to the attention of the general public  when whistleblower Edward Snowden reported on the mass surveillance methods and activities of government agencies. According to documents that Snowden made public, agencies such as the National Security Agency (NSA) were accessing huge amounts of data leaded from mobile apps including Angry Birds, Google Maps, Facebook, Flickr, LinkedIn and Twitter. Depending on what the user has specified in his profile,  a single picture posted from a mobile device could leak image metadata including the user’s nationality, current geolocation, age, gender, zip code, marital status, income, ethnicity, sexual orientation, education level and number of children. Although in this case the surveillance doesn’t target individual users, the large volumes of data can be subjected to big data analytics to yield useful information.

This was last updated in June 2016

Continue Reading About leaky app

SearchCompliance
  • OPSEC (operations security)

    OPSEC (operations security) is a security and risk management process and strategy that classifies information, then determines ...

  • smart contract

    A smart contract is a decentralized application that executes business logic in response to events.

  • compliance risk

    Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting ...

SearchSecurity
SearchHealthIT
SearchDisasterRecovery
  • What is risk mitigation?

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • change control

    Change control is a systematic approach to managing all changes made to a product or system.

  • disaster recovery (DR)

    Disaster recovery (DR) is an organization's ability to respond to and recover from an event that affects business operations.

SearchStorage
  • VRAM (video RAM)

    VRAM (video RAM) refers to any type of random access memory (RAM) specifically used to store image data for a computer display.

  • PCIe SSD (PCIe solid-state drive)

    A PCIe SSD (PCIe solid-state drive) is a high-speed expansion card that attaches a computer to its peripherals.

  • virtual memory

    Virtual memory is a memory management technique where secondary memory can be used as if it were a part of the main memory.

Close