Samsung Pay, Samsung's mobile payment solution, achieved 450 out of 500 points in a security test by umlaut. With this number of points, the app ends up in the "very good" category on the umlaut rating scale.
The app was put through its paces in four areas: security of data traffic between smartphone and bank, compliance with secure programming standards, data protection on the smartphone and protection against malicious attacks by third parties.
"We play it safe with mobile payment. The result of the independent test by umlaut proves the high priority that security has in the development and operation of the Samsung Pay app. The rating 'very good' underlines the role of Samsung Pay as a leading solution in mobile payment."
Gerrit Povel, Vice President, Direct to Consumer Division at Samsung Electronics in Germany
When testing the security of data traffic, the testers checked whether secure encryption algorithms and protocols are used, whether sensitive data is transmitted in encrypted form, data is transmitted in compliance with GDPR and whether the app protects against so-called man-in-the-middle attacks is protected. The aim of such attacks is to intercept, read or manipulate the data traffic.
Safe Programming Standards Review tested whether the Samsung Pay app was released without debugging capabilities, used up-to-date third-party libraries with no known security vulnerabilities, and obfuscated sensitive data in the app's source code.
When checking data protection, the testers tested the secure storage of sensitive data in the app memory or external memory of the smartphone. It was checked whether this data can be made accessible to third parties through logs, screenshots, cache and backup or system features. It was also tested whether the app required problematic approvals.
In addition, the app was checked for protection against so-called impersonation attacks. These are malicious attacks in which the user is mistaken for a trustworthy sender, for example by copying the content of the app.
In all tested aspects, the Samsung Pay app met the requirements of the test procedure. Among other things, it is not possible to install the app on a rooted smartphone. The app also does not require any unnecessary approvals.
"The result of our test reflects the performance that the Samsung Pay app has achieved across our established technical assessments and benchmarks"
Hakan Ekmen, CEO Telecommunications at umlaut
Swell):
press release
The article Samsung Pay: Independent test rates security as "very good" first appeared on xiaomist's blog .
Comments
Post a Comment