are more prevalent on mobile devices. On the other
hand, they require particular security measures due to
their mobility, e.g., data protection in case of theft
or loss. This unique combination of security risks
along with a reduced awareness of users due to the
playful nature of mobile devices poses severe chal-
lenges. Furthermore, users often blend private and
business use to the point of using their private de-
vices for work (BYOD). First solutions to some of
the problems are available as part of MDM (see be-
low). MDM solutions often allow to specify secu-
rity policies and provide means to react to device loss.
Platform providers such as Google and Apple prepare
guidelines for developing secure apps (And, 2012;
Apple Inc., 2012). Nevertheless, a holistic security
approach still requires considerable effort and knowl-
edge.
Commensurate to the scope and versatility of mo-
bile devices, mobile device management increases in
importance. Due the proliferation of apps, smart-
phones and tablets need to be administered similar
to desktop PCs and laptops. This includes the con-
figuration of (new) devices, installation of apps and
updates, distribution of relevant enterprise data, and
maintenance. Additionally, data should be synchro-
nized with other devices and data sources. Most func-
tions should be provided over-the-air, i.e., remotely
without the need to hand in the device to administra-
tion. The heterogeneity of the mobile device market
further complicates matters and necessitates a cross-
platform MDM, which is hindered by the closed na-
ture of mobile platforms with respect to administra-
tive functionality. The MDM market changes rapidly,
which makes orientation especially for smaller com-
panies difficult. Abstract, strategic overviews of the
market like (Redman et al., 2012) do not offer enough
insight for deciding on a MDM solution. In gen-
eral, one can distinguish between on-premise and
cloud-based MDM. Especially for smaller compa-
nies, cloud-based solutions might be viable, because
they do not need to be installed and maintained by the
company itself.
The mobile market is fragmented into largely in-
compatible mobile platforms, most importantly iOS,
Android, Blackberry, and Windows Phone. In an en-
terprise context, at least the first two, but often more,
need to be considered when developing apps. Imple-
menting an app separately for each platform as a na-
tive app requires a lot of resources. Cross-platform
approaches to app development promise to serve sev-
eral platforms from a single code base. Several cate-
gories can be distinguished (Heitk¨otter et al., 2012),
but all of them have some limitations. Depending on
the particular app, a mobile Web app – essentially a
Web site optimized for mobile use – might be suf-
ficient, or a so-called hybrid app that has access to
device-specific features. However, these Web-based
approaches do not produce truly native apps with a
native look & feel. No mature cross-platform solution
with a native look & feel exists so far, although first
steps in this direction emerge such as Titanium Ap-
pcelerator (Appcelerator, 2012). A novel approach is
to use model-driven software development (MDSD)
to build apps. MD
2
for example can be used to de-
scribe apps as a model using a domain-specific lan-
guage and to automatically generate native code from
this model (Heitk¨otter et al., 2013a; Heitk¨otter et al.,
2013b). Similar to the MDM market, cross-platform
approaches are an ongoing topic. Smaller develop-
ment companies need help navigating the confusing
market to pick a suitable approach.
During app development, testing is a particular
concern to ensure a defect free and smooth user expe-
rience on all supported devices. Again, heterogene-
ity causes particular problems. Devices, even with
the same mobile operating system, differ significantly
with respect to screen sizes, input methods, and other
device functionality. These features have a direct im-
pact on the functionality and user experience of apps.
Hence, testing an app only on a single device type
will not be sufficient. User interface tests, often man-
ually executed, become more important compared to
traditional applications. Due to the inherent mobility,
apps have to be tested with respect to their reaction to
context changes (Schulte and Majchrzak, 2012), e.g.
regarding device orientation, a loss of network con-
nection, or relocation. The emulators available for
most mobile operating systems are not sufficient for
thorough testing. Testers need access to several phys-
ical devices with different specifications. Provision-
ing such a set of current devices is not feasible for
smaller app development teams. However, there are
some cloud-based solutions that offer manual or au-
tomated remote control of mobile devices, e.g. (De-
viceAnywhere, 2012). Up to now, companies are on
their own when developing a testing strategy that con-
siders the particularities outlined above.
Topics not discussed due to space restrictions
are mobile requirements engineering, motivating and
training developers, energy efficiency, and coping
with offline situations.
5.2 Open Research Questions
While our project has led to insights regarding the sta-
tus quo of using applications for mobile devices, it
also has shown that there is a large number of open
questions. This is a limitation of our work: we have
DevelopmentofMobileApplicationsinRegionalCompanies-StatusQuoandBestPractices
343