Propuesta de Mejores Prácticas de Seguridad para el Desarrollo de Aplicaciones Móviles.

Abstract

In ESPOCH (Polytechnic School of Chimborazo) the Faculty of business administration has computer systems that have problems of availability and accessibility of information, in order to solve these problems, a literature review of good safety practices, is done: Secure Mobile Development Premier, Security Premier, Top Ten Mobile Risks, issued by NowSecure and Open Web Application Security Project, has surveyed the areas of management on the security parameters that are used in the development of their application and inconveniences have had to use them, resulting that knowledge of vulnerability (53,28%) is much higher than the prevention of it (9,02%) and registration of occurrence of attack, which shows that ESPOCH has risks that can be exploited in a short or long term, so it has issued a proposal of best security practices for developing mobile application consisting of 119 policies, which are divided into four layers: data storage layers, business logic layer transport layer and presentation layer, so it is recommended that this methodology should be implemented in order to mitigate these threats.