Let's Talk Money: Evaluating the Security Challenges of Mobile Money in the Developing World

摘要: Digital money drives modern economies, and the global adoption of mobile phones has enabled a wide range digital financial services in developing world. Where there is money, must be security, yet prior work on identified discouraging vulnerabilities current ecosystem. We begin by arguing that situation not as dire it may seem---many reported issues can resolved security best practices updated software. To support this argument, we diagnose problems from two directions: (1) large-scale analysis existing service products (2) series interviews with 7 developers designers Africa South America. frame assessment within novel, systematic threat model. In our analysis, evaluate 197 Android apps take deeper look at 71 to assess specific organizational practices. conclude although attack vectors are present many apps, providers generally making intentional, security-conscious decisions. The developer these findings, most participants demonstrated technical competency experience, all worked established organizations regimented code review processes dedicated teams.