Well, security should be no different. To build secure mobile
apps, there are certain things that we're just going to have to
do, and darn near every single time we write code. So, what
security goodies are in your bag of tricks? Here's some food for
thought on some things you might find useful, in no particular
order: - Protecting secrets at rest -- Inevitably, we need to
protect some data locally on the mobile device. Of course, the
principles of sound design should guide us to minimize the data
we store locally on the device. Some argue that we shouldn't
really store anything of value locally, but our users don't
always share that view. So we need to protect data locally:
usernames (a la remember me button), passwords (best avoided,
but for some consumer grade apps, it's acceptable), session
tokens, customer names, and on and on. We need a reliable set of
tools that help us protect things locally. Both iOS and Android
give us some ability to do that, but for times when we cannot
rely on the OS, we need mor