Add dg105

This commit is contained in:
Daniel Molkentin 2019-12-04 16:35:19 +01:00 committed by Daniel Molkentin
parent 9a99805eeb
commit 21f8c6138c

View file

@ -0,0 +1,18 @@
---
categories: ["Datengarten"]
tags: ["card10", "badge", "camp2019"]
series: "Datengarten"
title: "Datengarten 104"
no: 104
subtitle: "IT-Security Weaknesses of Emergency Alert Apps"
speaker: "Malte Schoenefeld, Marc Schoenefeld"
date: 2019-12-04T16:23:00+02:00
event:
start: 2019-12-10T20:00:00+02:00
end: 2019-12-10T21:00:00+02:00
location: CCCB
language: en
streaming: false
#recording: https://streaming.media.ccc.de/datengarten
---
Emergency Apps (like NINA/DE, FEMA/US and others) are a novel approach to enhance conventioal emergency alert channels with mobile devices, which nowadays are owned by the majority of the population to connect them to omnipresent data sources of the Internet. Due to typical characteristics implied by the design of mobile operating systems and applications, emergency apps on the hand have short version life cycles, on the other hand should be resilient to human and technical failure. Therefore we present the features of mobile apps, describe typical requirements towards these. To provide a practical result we scanned several apps for typical vulnerability patterns (and placed these in the CVE/CWE categories). In the end we summarize our research results towards a wish list to promote standard infrastructure and quality criteria for the development and deployment of such apps.