[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-573515-105":53,"doc-detail-573515-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","web-mobile-security-knowledge-area-version-101-stable-public-release","Web & Mobile Security Knowledge Area - Version 1.0.1 - Stable public release","","Web & Mobile Security Knowledge Area provides an overview of security mechanisms, attacks, and defences across modern web and mobile ecosystems. It explains how appification and webification shift execution from server-side to client-side, changing the attack surface and motivating new mitigations. The introduction traces evolution from early static web and limited mobile functionality to today’s browser-enabled scripting and plugin risks, as well as permission-based access control on smartphones and tablets.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/web-mobile-security-knowledge-area-version-101-stable-public-release/573515/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/web-mobile-security-knowledge-area-version-101-stable-public-release/573515.png","ImageObject",442,249,{"name":88,"@type":89},"Oliver","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-17","2026-10-14",true,{"@type":98,"interactionType":99,"userInteractionCount":9},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the purpose of the Web & Mobile Security Knowledge Area?","Question",{"text":108,"@type":109},"It provides an overview of security mechanisms, attacks, and defences in modern web and mobile ecosystems, intended for academic courses and industry professionals.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"How do appification and webification affect web and mobile security?",{"text":113,"@type":109},"Appification and webification drive security changes by making web and mobile client-side technologies and interfaces more prominent, increasing and reshaping the attack surface.",{"name":115,"@type":106,"acceptedAnswer":116},"What technologies are commonly used for communication in web and mobile ecosystems?",{"text":117,"@type":109},"Communication is mostly based on HTTP and HTTPS, and applications exchange documents such as HTML, JSON, and XML while using JavaScript on both server and client sides.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},573515,1792267638,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":9,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":35},8796095461610,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","Web & Mobile Security Knowledge Area  \nVersion 1.0.1  \nSascha Fahl  Leibniz University Hannover  \nEDITOR  \nEmil Lupu  Imperial College London  \nREVIEWERS  \nAlastair Beresford  University of Cambridge  \nSven Bugiel  CISPA Helmholtz Center for Information Security Hao Chen  University of California, Davis  \nPaul Freemantle  WSO2  \nMarco Viera  University of Coimbra  \nCOPYRIGHT  \n© Crown Copyright, The National Cyber Security Centre 2021 . This information is licensed under the Open Government Licence v3 .0. To view this licence, visit:  \n[http://www.nationalarchives.gov.uk/doc/open-government-licence/](http://www.nationalarchives.gov.uk/doc/open-government-licence/)   \nWhen you use this information under the Open Government Licence, you should include the following attribution: CyBOK © Crown Copyright, The National Cyber Security Centre 2021, licensed under the Open Government Licence: [http://www.nationalarchives.gov.uk/doc/open](http://www.nationalarchives.gov.uk/doc/open)government-licence/ .  \nThe CyBOK project would like to understand how the CyBOK is being used and its uptake. The project would like organisations using, or intending to use, CyBOK for the purposes of education, training, course development, professional development etc. to contact it at [contact@cybok.org](contact@cybok.org) to let the project know how they are using CyBOK.  \nVersion 1 .0.1 is a stable public release of the Web & Mobile Security Knowledge Area.  \nCHANGELOG  \n\n| Version date | Version number | Changes made |\n| --- | --- | --- |\n| July 2021 | 1.0.1 | Updated copyright statement; amended “issue” to “version”; amended typos |\n| October 2019 | 1.0 |  |\n\n1 INTRODUCTION  \nThe purpose of this Knowledge Area is to provide an overview of security mechanisms, attacks and defences in modern web and mobile ecosystems. This overview is intended for use in academic courses and to guide industry professionals interested in this area.  \nWeb and mobile security have become the primary means through which many users interact with the Internet and computing systems. Hence, their impact on overall information security is significant due to the sheer prevalence of web and mobile applications (apps) . Covering both web and mobile security, this Knowledge Area emphasises the intersection of their security mechanisms, vulnerabilities and mitigations. Both areas share a lot in common and have experienced a rapid evolution in the features and functionalities offered by their client side applications (apps) . This phenomenon, sometimes called appification, is a driver in modern web and mobile ecosystems. Web and mobile client apps typically interact with server side application interfaces using web technologies. This second phenomenon, also sometimes called webification, equally affects both web and mobile ecosystems. In the 1990s, web and mobile security had a strong focus on server-side and infrastructure security. Web browsers were mostly used to render and display static websites without dynamic content. The focus on the server-side prevailed even with the rise of early scripting languages such as Perl and PHP. However, web content became more dynamic in the 2000s, and server-side security had to address injection attacks. Similarly to web browsers, early mobile devices had limited functionality and were mostly used to make calls or send SMS. Mobile security back then focused on access control, calls and SMS security.  \nThe rise of modern web and mobile platforms brought notable changes. A significant amount of web application code is no longer executed on the server-side but runs in the browser. Web browser support for Java, Adobe Flash, JavaScript and browser plugins and extensions brought many new features to the client, which prompted a drastic change of the attack surface on the web. New types of attacks such as Cross-Site Scripting emerged and plugins proved to be vulnerable, e.g. Adobe Flash browser plugins are known for being an attractive target for attackers","cbCaijlkJBJjs0pc","https://ap.wps.com/l/cbCaijlkJBJjs0pc","pdf",3546823,48,"English","# Introduction\n## Purpose of the knowledge area\n## Evolution from server-side focus to client-side threats\n## Communication technologies and data formats\n## Mobile features and attacker opportunity","[{\"question\":\"What is the purpose of the Web \\u0026 Mobile Security Knowledge Area?\",\"answer\":\"It provides an overview of security mechanisms, attacks, and defences in modern web and mobile ecosystems, intended for academic courses and industry professionals.\"},{\"question\":\"How do appification and webification affect web and mobile security?\",\"answer\":\"Appification and webification drive security changes by making web and mobile client-side technologies and interfaces more prominent, increasing and reshaping the attack surface.\"},{\"question\":\"What technologies are commonly used for communication in web and mobile ecosystems?\",\"answer\":\"Communication is mostly based on HTTP and HTTPS, and applications exchange documents such as HTML, JSON, and XML while using JavaScript on both server and client sides.\"}]","Web & Mobile Security Knowledge Area - Version 1.0.1 - Stable public release | PDF",1791941738]