Türkiye'deki kamu kurumlarının android uygulamalarının güvenlik zafiyetlerinin analizi

---

Thesis Type: Postgraduate

Institution Of The Thesis: Gazi University, Bilişim Enstitüsü, Adli Bilişim, Turkey

Approval Date: 2019

Thesis Language: Turkish

Student: KAYA EMRE CİBALIK

Supervisor: CEMAL KOÇAK

Open Archive Collection: AVESIS Open Access Collection

Abstract:

With the huge increase in smartphone usage in recent years, the mobile application market has also developed rapidly. The two players of the mobile application market are widely used in Android and iOS operating systems. However, Android is both open source software and offers a more comfortable development environment, which has greatly increased the use of iOS. The wide usage of Android is a serious motivation for malware developers and attackers. For this reason, the security of Android applications has been a serious problem. The wide usage of smartphones has caused sensitive data to shift to the mobile world more quickly. This study is one of the first studies on this area that determination of the mobile application security weakness of public institutions in Turkey and on how to fix these weaknesses. A test model is proposed for testing applications. Within the scope of this study, the selected applications were tested through static and dynamic analysis processes. On the other hand, the latest version of Android has been analyzed about the security of SSL / TLS connections. The results of the analysis are reported in detail. In this thesis, MiTM (man in the middle) attacks were conducted to the applications and it was determined whether they were vulnerable or not. As a result of this study, it was made meaningful that the security gaps in mobile applications developers and public institutions would increase awareness.