Improper Implementation of Transport Layer Security: Impact on Android Applications and Man-in-the-Middle Attack

In this paper, we have analyzed the impact of improper implementation of Transport Layer Security (TLS) in Android applications. Communication security in Android applications is largely dependent on Transport Layer Security. For instance, data encryption, data integrity, authentication, trust-building, network attack prevention, and API and web service security are all provided by it. TLS preserves confidence and aids in preventing the unwanted exposure of sensitive data. However, improper implementation of TLS can pose a serious threat to the cybersecurity of an application. Therefore, software developers should ensure the security of applications, foster client confidence, and adhere to legal standards by skillfully implementing TLS. In this paper, we have chosen 25 miscellaneous Android applications and performed static analysis on them. Furthermore, we have identified various improper implementations of TLS in these applications. The riskiest TLS implementations in these applications include insufficient verification of the TLS certificate chain, invalid TLS certificates, insufficient checking of the TLS certificate validity, and insecure WebViews usage. For these vulnerable implementations of TLS, some applications are prone to a man-in-the-middle (MitM) attack. At last, we have provided the best practices of TLS implementations for Android applications. In addition, we have provided remediation for the vulnerabilities so that applications can be protected against MitM attacks.