Automating National Information Assurance Partnership Requirements Testing for Mobile Apps

Ensuring the security of mobile app software for use within the federal government no longer needs to be time consuming or expensive. Under a joint pilot program, the Department of Homeland Security (DHS) Science and Technology Directorate (S&T) and National Information Assurance Partnership (NIAP) within the National Security Agency (NSA) cybersecurity mission have demonstrated that the process can be automated.

Assessing whether mobile apps are compliant with a NIAP Protection Profile (PP) has traditionally been a long and costly process. By automating that process, S&T and NIAP offer agencies the ability to quickly, affordably, and reliably determine if their apps meet NIAP’s stringent security requirements.

This pilot testing report demonstrates that automated mobile app testing tools and methodologies are reliable and efficient.