 Unencrypted credit card information stored in the app could lead to serious data leaks.  A new vulnerability has been discovered on the app that could leak payment information when transacting over Wi‐Fi.  Malware on users’ mobile devices could interfere with the mobile payment app leading to fraudulent transactions on users’ accounts, forcing the bank to reimburse users and lose lots of money.  The security updates on this app need to be performed manually due to the lack of an automatic update feature. Suggest a specific general category of risk mitigation to address each of the partial risks identified above.

Computer Networking: A Top-Down Approach (7th Edition)
7th Edition
ISBN:9780133594140
Author:James Kurose, Keith Ross
Publisher:James Kurose, Keith Ross
Chapter1: Computer Networks And The Internet
Section: Chapter Questions
Problem R1RQ: What is the difference between a host and an end system? List several different types of end...
icon
Related questions
Question

The following are some of the “partial” risk statements that have been
identified for a high schools online payment Android app that you recently
developed for the various high schools in Pretoria.

 
 Unencrypted credit card information stored in the app could lead to
serious data leaks.
 A new vulnerability has been discovered on the app that could leak
payment information when transacting over Wi‐Fi.
 Malware on users’ mobile devices could interfere with the mobile
payment app leading to fraudulent transactions on users’ accounts,
forcing the bank to reimburse users and lose lots of money.
 The security updates on this app need to be performed manually due to
the lack of an automatic update feature.


Suggest a specific general category of risk mitigation to address each of the
partial risks identified above.

Expert Solution
steps

Step by step

Solved in 2 steps

Blurred answer
Recommended textbooks for you
Computer Networking: A Top-Down Approach (7th Edi…
Computer Networking: A Top-Down Approach (7th Edi…
Computer Engineering
ISBN:
9780133594140
Author:
James Kurose, Keith Ross
Publisher:
PEARSON
Computer Organization and Design MIPS Edition, Fi…
Computer Organization and Design MIPS Edition, Fi…
Computer Engineering
ISBN:
9780124077263
Author:
David A. Patterson, John L. Hennessy
Publisher:
Elsevier Science
Network+ Guide to Networks (MindTap Course List)
Network+ Guide to Networks (MindTap Course List)
Computer Engineering
ISBN:
9781337569330
Author:
Jill West, Tamara Dean, Jean Andrews
Publisher:
Cengage Learning
Concepts of Database Management
Concepts of Database Management
Computer Engineering
ISBN:
9781337093422
Author:
Joy L. Starks, Philip J. Pratt, Mary Z. Last
Publisher:
Cengage Learning
Prelude to Programming
Prelude to Programming
Computer Engineering
ISBN:
9780133750423
Author:
VENIT, Stewart
Publisher:
Pearson Education
Sc Business Data Communications and Networking, T…
Sc Business Data Communications and Networking, T…
Computer Engineering
ISBN:
9781119368830
Author:
FITZGERALD
Publisher:
WILEY