A new security certification has been introduced for mobile apps and VPN by the Internet of Secure Things Alliance, an IoT security certification authority (a.k.a. ioXt).
A ‘mobile application profile’ is a set of security criteria for which applications can be certified in the new ioXt compliance program. Additional requirements for private virtual network (VPN) applications are included in the profile or mobile app evaluation.
The criteria, as well as many certified laboratories like NCC Group and Dekra and mobile security test vendors, like NowSecure, were shaped by Google and Amazon. Google’s VPN is one of the first to be certified against the criteria within the Google One service.
Google supports ioXt security and privacy certification of their applications
Mobile app manufacturers can obtain a security and privacy certification of their applications.
ioXt Alliance has a broad range of tech-industry members, including Amazon, Comcast, Facebook, Google, Legrand, Resideo, Schneider Electric, T-Mobile, Zigbee Alliance and the Z-Wave Alliance. The company also has its own board of directors.
Around 20 industry leaders contributed to the development of the mobile app profile requirements, including Amit Agrawal, Amazon’s leading security architect, and Brooke Davis from Google Play’s Strategic Partnerships team. The two are mobile app profile group vice-presidents.
The certification for mobile App profiles includes insecure interface inspections, automatic updates, safe password management, standard safety inspections, and assessment of the verification of the software. It also considers end-of-life policies and vulnerability reporting programs.
According to Davis, since IoT security checks have already been underway in the ioXt Alliance, coverage for apps which manage these devices has been decided to be extended.
“We have seen an early concern on Internet of Things and the development of virtual private networks but the standard is suitable for any cloud-based service including social, messaging, fitness and productivity applications,” Davis said.
Including Google One (which has integrated VPN services), ExpressVPN, NordVPN, McAfee Innovations, Android OpenVPN, Private Internet Access VPN and VPN privacy are consumer VPNs that have been certified.
VPN accreditation can help Android owners, as Google needs to pull out malicious VPNs from the Google Play Store every now and then.
- Grace period for Project Zero extended to 30-days
- YES, Apples are ordered from a food store, gets apple from Tesco
- Xiaomi Mi 11 Ultra, Mi 11X Pro, Mi 11X Specs tipped
What is ioXt?
The mission of the ioXt Alliance is to build confidence in Internet of Things products through multi-stakeholder, international, harmonized, and standardized security and privacy requirements, product compliance programs, and public transparency of those requirements and programs.
What is IoT?
The Internet of Things (IoT) refers to a system of interrelated, internet-connected objects that are able to collect and transfer data over a wireless network without human intervention.
The personal or business possibilities are endless. A ‘thing’ can refer to a connected medical device, a biochip transponder (think livestock), a solar panel, a connected automobile with sensors that alert the driver to a myriad of possible issues (fuel, tire pressure, needed maintenance, and more) or any object, outfitted with sensors, that has the ability to gather and transfer data over a network.
What is a VPN?
A virtual private network (VPN) gives you online privacy and anonymity by creating a private network from a public internet connection. VPNs mask your internet protocol (IP) address so your online actions are virtually untraceable. Most important, VPN services establish secure and encrypted connections to provide greater privacy than even a secured Wi-Fi hotspot.
What Is Google One?
Google One is a service that you might have seen advertised, but aren’t familiar with. You might wonder how it’s different from Google Drive, and why does it require a paid subscription? We’re here to answer those questions.