[調査レポート] コロナ禍の危機:モバイル・アプリケーション・セキュリティの現状 |シノプシス

COVID-19CyRC3,000Android183 • •• 63% 3,335 •139•44%•94%•73%2 &18 •33,385•15,139•10,653 •2,224•10,863•IPURL392,795 :...................................................1....................................................3Black Duck Binary Analysis....3..............................................................................................................4.......................................................................................................................4........................................................................................................................................................................4..........................................................................................................................5.............................................................................................................................................................6BDSA.......................................................................................................7.........................................................................................................................................8...............................................................................................................9...............................................................................................................................................10 ......................................................................................................................................................15 : CyRC2 • • SCABlack Duck®Binary Analysis 20202App Annie2020240%[1] CyRCGoogle Play20211Android3,335 1 Google Play&115%75%50%[2] CyRCGoogle Play202113,335&& CyRCCyRCBlack Duck3 • •AWSGoogle Cloud • BlackDuck Binary Analysis CyRCBlack Duck Binary AnalysisAndroidBlack Duck Binary Analysish Black Duck CyRC3,335 98% 63%1139181/3 CyRC3,3352,11563%13982,000Android CyRC CVE1079488%63%5,179155 25710,4042889,82994%96%14335 1589258%4,787152 CyRC2018Black Duck Security AdvisoryBDSABDSANVDNISTBDSACVSSCWE BDSABDSA2018 CyRCBDSA3/42018 3,137CyRC 2,28573%2017 BDSA BDSA78294%7825.75% CyRC SlackTeams 44%PoCRCECyRC PoCPoCPoCRCEBDSARCEPoCRCE5 PoCRCERCEPoC95% 44%PoCRCECyRC CyRC PoCRCEBDSA3 1BDSABDSA340% BDSA JSON Web TokenJWT65AWS26Twilio406Google Cloud804Facebook27RSA60OAuth81710,863IP27,5684URL365,22711Google Safebrowsing CyRC 4 AWSGoogle CloudIP JSON Web TokenJWTJWTJWTJWT43JWT IPURLURL/IPURL/IPAPIURL IP API SolarWinds2021226solarwinds123 SolarWinds1OrionSUNSPOTSUNSPOTOrionSUNBURSTSUNBURSTOrionOrionSolarWindsOrion18,000SUNBURSTMicrosoftIntelFortune 500 CyRC Black DuckSolarWinds 10,653 15,139 CyRCBlack DuckAndroidCyRC12 33,385 CyRC14.5OS3 1181113% •7% •&6.5% •6% •5.6% •26•25•25 CyRC2& 26 100GoogleDangerous11 GoogleDangerous3211 ACCESS_FINE_LOCATION1ACCESS_COARSE_LOCATION &&38 5005631GoogleDangerousSignature Android FACTORY_TEST FACTORY_TESTrootFACTORY_TEST2500 CALL_PRIVILEGED CALL_PRIVILEGED PROCESS_OUTGOING_CALLS PROCESS_OUTGOING_CALLS& BLUETOOTH PRIVILEGED BLUETOOTH PRIVILEGEDBluetooth 10&root CyRC1 Black Duck SCABlack Duck Binary Analysis Black Duck Binary Analysis DevSecOps CyRC CyRCCyRC www.synopsys.com/jp/software 158-00942-21-1TEL: 03-6746-3600Email:sig-japan@synopsys.comwww.synopsys.com/jp/software