Security Glossary

Back-end is the server side of an application that manages data processing, functional logic, database operations and communication with client applications such as mobile apps. The back-end handles sensitive operations and data, making it the primary target for attackers. Strong back-end security is a must for an application. It processes API requests, performs authentication and authorisation, interacts with databases and returns responses to the front-end. Backend is not visible to the users, but all processes go through it, are approved and managed by it. It is the core part (brain) of an application.

A bank-end developer is a software professional who manages the back-end of an application. They are responsible for building and maintaining the server-side logic, database and APIs that power applications. Backend developers play an important role in implementing secure coding practices, protecting data and ensuring safe communication between systems. They design APIs, manage databases, implement authentication mechanisms, and manage system performance and scalability while maintaining secure architecture. In mobile app development, they maintain API security, validate data, and prevent vulnerabilities.

Backdoor is an intentional or unintentional method of bypassing normal authentication or encryption to gain unauthorised remote access to a system or application. They are installed by attackers or left by developers for troubleshooting. Backdoors allow attackers to access systems without detection, steal data, or maintain persistent control over applications. There are three types of backdoors:

• Software backdoors: Hidden code, hardcoded passwords, or undocumented administrative access.
• Cryptographic backdoors: They lead to encryption bypass due to flaws in algorithms.
• Hardware backdoors: Access to compromised devices and chips.

They can be detected and prevented by monitoring unusual connections and traffic, using AI/ML to detect unauthorised, abnormal behaviour in the app or deploying firewalls, detection systems and anti-malware software.

Biometric authentication is a passwordless and secure access control technique. It verifies user identity using biological traits such as fingerprints, eye patterns, voice, and facial features. It does not use any passwords or pins, but recognises the user through its fingerprints, eye pattern and facial features. It reduces attacks and theft of personal data by providing faster, more convenient security for mobile devices, finance and facility access. It works by capturing biometric data through sensors and identifying them, verifying them and then providing access. It is widely used in current mobile devices, offices and securing sensitive data.

Blackbox testing is an approach where the testers evaluate an application without access to its internal code or structure. It helps identify vulnerabilities from an external attacker’s perspective, simulating real world attack scenarios. Testers interact with the application through inputs and outputs, analysing behaviour to find security flaws or unexpected responses. In mobile apps, it is used to test APIs, authentication flows, and user interactions without needing access to source code. This testing discovers flaws like SQL injection, cross-site scripting (XSS), and insecure data.

Bugsmirror Defender is a Runtime Application Self-Protection (RASP) solution that safeguards mobile apps from runtime threats. It embeds into the mobile app with zero code integration and continuously monitors runtime behaviour on user’s device to detect more than 50 runtime risks such as rooting, jailbreaking, SSL pinning bypass, app tampering, repackaging, and debugging. It is written in low-level languages and runs in a separate thread; hence, it does not impact application performance and user experience. Defender is a highly customisable solution which offers real-time threat blocking, runtime integrity checks, protection against app tampering with custom mitigation actions. It enforces security policies instantly when a threat is detected, helping organisations to prevent fraud, data leakage, and unauthorised access while maintaining a seamless user experience.

Bugsmirror MASST (Mobile Application Security Suite & Tools) is a comprehensive mobile application security solution designed for Android and iOS apps. It combines threat detection, mitigation and threat intelligence into a single platform. Threat Detection includes tools like static application security testing (CodeLock), Dynamic runtime testing (RunLock), Dynamic API testing (APILock), and red teaming assessment (ThreatLock). Threat Mitigation includes Bugsmirror Defender RASP solution, which provides comprehensive runtime protection from more than 50 runtime threats, and Bugsmirror Shield provides reverse engineering protection and source code encryption solution. Threat intelligence includes the ThreatLens dashboard for real-time threat monitoring and analytics with an OTA (Over-The-Air) security release solution. MASST helps early mobile risk detection, fixes security gaps, provides compliance support, improves app resilience, and reduces breach risk.

Bugsmirror Shield is an advanced anti-reverse engineering tool that goes beyond obfuscation and hard-codes to protect mobile apps from reverse engineering, code analysis and tampering. It protects the intellectual property and business logic of an application. It strengthens app binaries through deep code obfuscation, transformation, and advanced encryption. These techniques make it extremely difficult for attackers to decompile, analyse or understand the internal logic of the app. It is seamlessly integrated with the Android and iOS apps and secures them. It is designed to secure hybrid and cross-platform mobile applications along with native applications.