Page 45 - index

purchasing, 38% shared data with ad networks or analytics companies, 33% accessed the
address book or contact list, and 3% accessed the calendar.

There was one behavior that Android apps exhibit significantly more than iOS apps; more
Android apps access the UDID, 71% of the top 200, and might potentially identify the user from
that information. Apple actually prohibits iOS developers from accessing UDIDs, but the
Appthority Service identified that 26% of the top iOS apps are still doing this, which is actually
20 percentage points higher than the findings in Appthority’s Summer 2013 App Reputation
Report.

Hidden mobile app behaviors are a risk to users and their employers. As employees turn to their
mobile devices and apps for work, personal and corporate data mingle and are equally
vulnerable. Without automation to handle the scale of tens of thousands of employees with
hundreds of thousands of mobile apps, organizations are faced with the daunting task of
identifying which mobile apps put corporate data at risk and which apps are benign.

The only way to avoid security and privacy problems is to learn more about mobile app risk.
Organizations that are adopting Mobile First and BYOD policies need to incorporate a fully
automated Mobile App Risk Management solution to manage security and corporate privacy
risks, from the location tracking of executives to leaked corporate data. Only by identifying the
risks present within apps may organizations build stronger defenses against current and future
threats and fully leverage the potential of mobility to empower a smarter, safer, mobile
workforce.

About the Author

Domingo Guerra
Co-founder and President

Domingo was born and raised in Monterrey, Mexico, Domingo
moved to the United States at age 18 to pursue his passion for
technology. Domingo brings years of Lean Manufacturing and
Stanford's "Design Thinking" experience to Appthority. These
principles translate well into the Lean Startup mantra we
embrace at the company.

Domingo has Product Design & Development experience as well as New Product Introduction &
Operations experience across multiple industries. As a Mechanical Engineer for Applied
Materials (Semiconductor Manufacturing Industry), he led design and development projects in
the Robotics space, securing two patents and winning multiple design awards. With Program &
Project Management roles at Brocade Communications (Datacenter Networking Industry),
Domingo led large cross-functional matrix teams in the introduction of both hardware and
software enterprise products.

Domingo holds a BS from The University of Texas at Austin, an MS from Stanford University,
and an MBA from Santa Clara University.

45 Cyber Warnings E-Magazine – April 2014 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide