Authors:
Felipe Faustino
1
;
Jéssyka Vilela
1
;
Carla Silva
1
and
Mariana Peixoto
2
Affiliations:
1
Centro de Informática, Universidade Federal de Pernambuco (UFPE), Av. Jornalista Aníbal Fernandes, s/n, Cidade Universitária, Recife-PE, Brazil
;
2
Universidade de Pernambuco (UPE), R. Cap. Pedro Rodrigues, s/n, São José, Garanhuns-PE, Brazil
Keyword(s):
Mobile Devices, Security Testing, Systematic Mapping Study.
Abstract:
Context: Due to mobile devices’ popularity, they contain more valuable information. Problem: these devices face many security issues and challenges since smartphones are interesting for security attacks once they contain private and sensitive data. Objective: the aim of this paper is to investigate security testing techniques for mobile devices. Method: a Systematic Mapping Study (SMS) was conducted to identify solutions focused on software security testing for mobile devices. Results: 1264 primary papers were identified, and 17 relevant papers were selected. We found mobile security testing tends to be mostly: dynamic; automated testing; penetration testing; dynamic analysis. Conclusions: dynamic testing represents 58.82% of security testing, followed by static testing, 29.41%, and studies that present both of them 11.76%. It’s important to highlight that automated and semi-automated testing represent 88.23% of the studies and only 11.76% used manual testing.