Security Testing Of Android Based Covid Tracer Applications

Digital contact tracing application is a digital measure implemented by many countries across the globe in response to the Covid-19 outbreak. Use of applications like these present certain concerns regarding user privacy and application security. In this paper, four Covid-19 tracing applications were tested using MobSF and drozer to check for risks in the code (static analysis) and determine potential attack surfaces. The observations and findings were compiled in tabular form, including the OWASP mobile top 10 issues, as well as the CWE that were detected using MobSF. The potential attack surfaces detected using drozer were also listed.