Systematic Literature Review on Penetration Testing for Mobile Cloud Computing Applications

Abstract

Mobile cloud computing (MCC) enables mobile devices to exploit seamless cloud services via offloading, and has numerous advantages and increased security and complexity. Penetration testing of mobile applications has become more complex and expensive due to several parameters, such as the platform, device heterogeneity, context event types, and offloading. Numerous studies have been published in the MCC domain, whereas few studies have addressed the common issues and challenges of MCC testing. However, current studies do not address MCC and penetration testing. Therefore, revisiting MCC and penetration testing domains is essential to overcoming the inherent complexity and reducing costs. Motivated by the importance of revisiting these domains, this paper pursues two objectives: to provide a comprehensive systematic literature review (SLR) of the MCC, security and penetration testing domains and to establish the requirements for penetration testing of MCC applications. This paper has systematically reviewed previous penetration testing models and techniques based on the requirements in Kitchenham's SLR guidelines. The SLR outcome has indicated the following deficiencies: the offloading parameter is disregarded; studies that address mobile, cloud, and web vulnerabilities are lacking; and a MCC application penetration testing model has not been addressed by current studies. In particular, offloading and mobile state management are two new and vital requirements that have not been addressed to reveal hidden security vulnerabilities, facilitate mutual trust, and enable developers to build more secure MCC applications. Beneficial review results that can contribute to future research are presented.INDEX TERMS Mobile cloud computing, penetration testing, offloading, mobile testing, cloud testing.

Data Encryption Algorithm Aes by Using Blockchain Technology: A Review

“…SLR process has some steps (Qasem et al, 2019;Salleh et al, 2018;Rosati et al, 2017;Hidayat, Azzery, & Mahardiko, 2019;Sharma & Singh, 2017;AlAhmad et al, 2019;Christo et al, 2019;Boomija, 2016;Shen & PenaMora, 2018). First, we had to define the problems.…”

Dynamic Testing Techniques of Non-functional Requirements in Mobile Apps: A Systematic Mapping Study

“…Secondary studies in mobile app testing have been predominant over the last two years [3,4,48,59,80,86]. Luo et al [59] aimed to give an overview of the simulation methods, i.e., data-driven and model-based, for testing mobile context-aware applications.…”

“…Moreover, we can observe that the topic is quite new with approximately 13 years of contributions, whereby the 58.9%(33/56) of primary studies were published during the last four years, as shown in Table 7. The growing interest of the community matches the raising number of smartphones sold from 2007 3 . We can observe a growing trend of works published in journals, showing that the quality of the works has reached a suicient quality.…”

Cloud Computing

“…20 of these studies conducted SLR method. The vast majority of these studies have focused on a specific subject of cloud computing and searched the literature, such as, structural equation modeling in cloud computing (Pisirir et al, 2019), supply chain integration (Novais et al, 2019), cloud computing adoption in developing countries (Mrhaouarh et al, 2018), cloud computing service composition (Jula et al, 2014), open source cloud simulation platforms and types (Lynn et al, 2016), applying semantic technologies in cloud computing (Brabra et al, 2016), resource scheduling and security in cloud computing (Sheikh et al, 2019), penetration testing in Mobile Cloud Computing apps (Al-Ahmad et al, 2019).…”