An Empirical Study on Developing Secure Mobile Health Apps: The Developers' Perspective

• Published in: 2020 27th Asia-Pacific Software Engineering Conference (APSEC) pp. 208 - 217
• Main Authors: Aljedaani, Bakheet, Ahmad, Aakash, Zahedi, Mansooreh, Babar, M. Ali
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.12.2020
• Subjects: Empirical Software Engineering; Faces; Medical services; Mobile applications; Mobile Health; Pervasive computing; Secure Software Development; Security; Software; Software Engineering for Mobile; Wireless sensor networks
• ISSN: 2640-0715
• DOI: 10.1109/APSEC51365.2020.00029

Mobile apps exploit embedded sensors and wireless connectivity of a device to empower users with portable computations, context-aware communication, and enhanced interaction. Specifically, mobile health apps (mHealth apps for short) are becoming integral part of mobile and pervasive computing to improve the availability and quality of healthcare services. Despite the offered benefits, mHealth apps face a critical challenge, i.e., security of health-critical data that is produced and consumed by the app. Several studies have revealed that security specific issues of mHealth apps have not been adequately addressed. The objectives of this study are to empirically (a) investigate the challenges that hinder development of secure mHealth apps, (b) identify practices to develop secure apps, and (c) explore motivating factors that influence secure development. We conducted this study by collecting responses of 97 developers from 25 countries - across 06 continents - working in diverse teams and roles to develop mHealth apps for Android, iOS, and Windows platform. Qualitative analysis of the survey data is based on (i) 8 critical challenges, (ii) taxonomy of best practices to ensure security, and (iii) 6 motivating factors that impact secure mHealth apps. This research provides empirical evidence as practitioners' view and guidelines to develop emerging and next generation of secure mHealth apps.