<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Beiträge von Ali Pilehvary - Mobile USTP MKL</title>
	<atom:link href="https://mobile.fhstp.ac.at/author/it251515/feed/" rel="self" type="application/rss+xml" />
	<link>https://mobile.fhstp.ac.at/author/it251515/</link>
	<description>Die &#34;Mobile Forschungsgruppe&#34; der USTP, sie  sammelt hier alles zu den Themen Design, UX und Entwicklung mobiler Applikationen</description>
	<lastBuildDate>Wed, 21 Jan 2026 21:45:50 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://mobile.fhstp.ac.at/wp-content/uploads/2025/03/icon-120x120.webp</url>
	<title>Beiträge von Ali Pilehvary - Mobile USTP MKL</title>
	<link>https://mobile.fhstp.ac.at/author/it251515/</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>HomeBudget+ – 1st Semester Project</title>
		<link>https://mobile.fhstp.ac.at/allgemein/homebudget-1st-semester-project/</link>
		
		<dc:creator><![CDATA[Ali Pilehvary]]></dc:creator>
		<pubDate>Wed, 21 Jan 2026 21:45:49 +0000</pubDate>
				<category><![CDATA[Allgemein]]></category>
		<guid isPermaLink="false">https://mobile.fhstp.ac.at/?p=15360</guid>

					<description><![CDATA[<p>As my project for the first semester, I developed HomeBudget+, a personal finance management mobile application designed to help users track and organize their expenses in a simple, secure, and offline-first way.The app is intended for individuals or households who want to monitor their financial activities—such as rent, groceries, utilities, transportation, and personal expenses—in one <a class="read-more" href="https://mobile.fhstp.ac.at/allgemein/homebudget-1st-semester-project/">[...]</a></p>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/homebudget-1st-semester-project/">HomeBudget+ – 1st Semester Project</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph">As my project for the first semester, I developed <strong>HomeBudget+</strong>, a personal finance management mobile application designed to help users track and organize their expenses in a simple, secure, and offline-first way.<br>The app is intended for individuals or households who want to monitor their financial activities—such as rent, groceries, utilities, transportation, and personal expenses—in one centralized place.</p>



<p class="wp-block-paragraph">Unlike many existing budgeting applications that rely on online accounts and cloud storage, HomeBudget+ works entirely offline using a local database on the user’s device. This approach ensures maximum privacy while still offering practical features such as login functionality, structured expense tracking, and a clean mobile user interface.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading"><strong>Project Goals and Scope</strong></h3>



<p class="wp-block-paragraph">The primary goal of the first semester was to establish a solid technical foundation and implement the core functionality of the application. The defined scope included:</p>



<ul class="wp-block-list">
<li>Implementing a secure <strong>user login system</strong>.</li>



<li>Building an expense tracking system with categorized entries.</li>



<li>Enabling full CRUD operations (create, edit, delete expenses).</li>



<li>Allowing users to define budgets per category and time period.</li>



<li>Storing all financial data locally on the device for offline usage.</li>



<li>Designing a responsive and mobile-optimized user interface.</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading"><strong>Tools and Technologies</strong></h3>



<p class="wp-block-paragraph">To implement HomeBudget+, the following tools and technologies were used:</p>



<ul class="wp-block-list">
<li><strong>Framework:</strong> Ionic + Angular – for cross-platform mobile development.</li>



<li><strong>Database:</strong> SQLite or Capacitor Storage – for secure local data storage.</li>



<li><strong>Authentication:</strong> Local login system.</li>



<li><strong>Design &amp; Prototyping:</strong> Figma – for UI mockups and user flow planning.</li>



<li><strong>Version Control:</strong> Git and GitHub.</li>



<li><strong>Development Tools:</strong> Visual Studio Code, Chrome DevTools, Android Emulator.</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading"><strong>Implementation Process</strong></h3>



<p class="wp-block-paragraph">Due to the limited timeframe of approximately 100 hours, the development process focused primarily on functionality and system architecture. The first step was planning the application structure, database schema, and expense categories.</p>



<p class="wp-block-paragraph">After that, the login functionality and core expense management logic were implemented. This included adding, editing, and deleting expense entries as well as defining budgets per category. All data was stored locally to ensure offline functionality.</p>



<p class="wp-block-paragraph">The final phase consisted of testing, basic UI refinement, and documentation.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading"><strong>What’s Included in the First Semester</strong></h3>



<ul class="wp-block-list">
<li>User login functionality.</li>



<li>Expense tracking with multiple categories (e.g., Rent, Food, Transport, Utilities, Insurance, Entertainment).</li>



<li>Budget definition per category and time range.</li>



<li>Local offline data storage.</li>



<li>Core application logic and data handling.</li>



<li>A clean and responsive mobile UI foundation.</li>
</ul>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading"><strong>What’s Next</strong></h3>



<p class="wp-block-paragraph">In the next development phases, the focus will be on automation, analytics, and improved user experience. Planned future features include:</p>



<ul class="wp-block-list">
<li><strong>Bank integration:</strong><br>The app will connect directly to the user’s bank software or banking APIs. Expenses will be imported automatically and assigned to the correct categories without manual input.</li>



<li>Visual expense reports using bar and pie charts.</li>



<li>Payment reminders and notification system.</li>



<li>Further improvements to the simple and responsive user interface.</li>



<li>Optional advanced features such as data export, backups, and AI-based budgeting suggestions.</li>
</ul>



<p class="wp-block-paragraph">Overall, the first semester successfully established a strong foundation for a privacy-focused and scalable personal finance application. With the core logic, login system, and offline architecture in place, HomeBudget+ is well prepared for future expansion.</p>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/homebudget-1st-semester-project/">HomeBudget+ – 1st Semester Project</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Web Performance Optimization in Modern Frontend Frameworks</title>
		<link>https://mobile.fhstp.ac.at/allgemein/web-performance-optimization-in-modern-frontend-frameworks/</link>
		
		<dc:creator><![CDATA[Ali Pilehvary]]></dc:creator>
		<pubDate>Wed, 21 Jan 2026 20:59:51 +0000</pubDate>
				<category><![CDATA[Allgemein]]></category>
		<guid isPermaLink="false">https://mobile.fhstp.ac.at/?p=15353</guid>

					<description><![CDATA[<p>Introduction Web performance has become a critical quality attribute of modern web applications. Users expect fast load times, smooth interactions, and responsive interfaces, regardless of device or network conditions. From a business perspective, performance directly affects user retention, conversion rates, and search engine visibility. Modern frontend frameworks such as React, Angular, and Vue have significantly <a class="read-more" href="https://mobile.fhstp.ac.at/allgemein/web-performance-optimization-in-modern-frontend-frameworks/">[...]</a></p>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/web-performance-optimization-in-modern-frontend-frameworks/">Web Performance Optimization in Modern Frontend Frameworks</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></description>
										<content:encoded><![CDATA[
<h3 class="wp-block-heading">Introduction</h3>



<p class="wp-block-paragraph">Web performance has become a critical quality attribute of modern web applications. Users expect fast load times, smooth interactions, and responsive interfaces, regardless of device or network conditions. From a business perspective, performance directly affects user retention, conversion rates, and search engine visibility.</p>



<p class="wp-block-paragraph">Modern frontend frameworks such as React, Angular, and Vue have significantly improved developer productivity and application maintainability. However, these frameworks often rely heavily on JavaScript and client-side rendering, which can introduce performance challenges if not handled carefully.</p>



<p class="wp-block-paragraph">This blog post examines web performance optimization in the context of modern frontend frameworks. It explains the technical foundations of web performance, identifies common performance bottlenecks, discusses key optimization techniques, and compares how popular frameworks address performance concerns.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">What Is Web Performance Optimization?</h3>



<p class="wp-block-paragraph">Web performance optimization refers to the process of improving how quickly and efficiently a web application loads, renders, and responds to user interactions. From a technical perspective, performance is influenced by multiple factors, including network latency, resource size, browser rendering behavior, and JavaScript execution.</p>



<p class="wp-block-paragraph">A central concept in this context is the <strong>Critical Rendering Path (CRP)</strong>. The CRP describes the sequence of steps a browser takes to convert HTML, CSS, and JavaScript into pixels on the screen. Blocking resources, excessive JavaScript execution, or inefficient rendering strategies can significantly delay this process.</p>



<p class="wp-block-paragraph">Performance is commonly measured using standardized metrics. Google’s <strong>Core Web Vitals</strong> have become especially important, as they are used as ranking signals in search results:</p>



<ul class="wp-block-list">
<li><strong>Largest Contentful Paint (LCP)</strong> measures loading performance.</li>



<li><strong>First Input Delay (FID)</strong> measures interactivity.</li>



<li><strong>Cumulative Layout Shift (CLS)</strong> measures visual stability.</li>
</ul>



<p class="wp-block-paragraph">Optimizing these metrics is a primary goal of modern frontend performance engineering.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">Modern Frontend Frameworks and Performance Challenges</h3>



<p class="wp-block-paragraph">Modern frontend frameworks are typically used to build <strong>Single Page Applications (SPAs)</strong>. In SPAs, a large portion of the application logic is executed on the client side. While this enables rich interactivity, it also shifts more responsibility to the browser.</p>



<p class="wp-block-paragraph">One of the main challenges is <strong>JavaScript execution cost</strong>. Large JavaScript bundles must be downloaded, parsed, compiled, and executed before the application becomes interactive. This can block the main thread and delay user input handling, especially on low-end devices.</p>



<p class="wp-block-paragraph">Another challenge is <strong>hydration</strong> in applications that use server-side rendering. During hydration, the browser attaches event listeners and internal framework state to pre-rendered HTML. Although this improves perceived load time, it introduces additional runtime overhead.</p>



<p class="wp-block-paragraph">Framework abstractions such as the Virtual DOM also add a performance trade-off. While they simplify UI updates, inefficient component design or unnecessary re-renders can still negatively impact performance.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">Key Performance Optimization Techniques</h3>



<h4 class="wp-block-heading">Code Splitting and Lazy Loading</h4>



<p class="wp-block-paragraph">Code splitting allows applications to divide JavaScript bundles into smaller chunks that are loaded on demand. Instead of delivering the entire application upfront, only the code required for the current view is fetched.</p>



<p class="wp-block-paragraph">Lazy loading builds on this idea by deferring the loading of non-critical components, routes, or images until they are actually needed. Modern bundlers such as Webpack, Vite, and Rollup provide built-in support for these techniques.</p>



<p class="wp-block-paragraph">These approaches significantly reduce initial load time and improve time-to-interactive.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h4 class="wp-block-heading">Tree Shaking and Bundle Optimization</h4>



<p class="wp-block-paragraph">Tree shaking is a build-time optimization that removes unused code from JavaScript bundles. It relies on static analysis of ES module imports and exports.</p>



<p class="wp-block-paragraph">By eliminating dead code, bundle size can be reduced considerably, which leads to faster downloads and lower parsing costs. Effective tree shaking requires careful dependency selection and proper module syntax.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h4 class="wp-block-heading">Rendering Strategies: CSR, SSR, and SSG</h4>



<p class="wp-block-paragraph">Frontend applications can use different rendering strategies:</p>



<ul class="wp-block-list">
<li><strong>Client-Side Rendering (CSR)</strong> renders content entirely in the browser. It offers high interactivity but often results in slower initial load times.</li>



<li><strong>Server-Side Rendering (SSR)</strong> generates HTML on the server for each request, improving initial render speed and SEO.</li>



<li><strong>Static Site Generation (SSG)</strong> pre-renders pages at build time, providing excellent performance for content-heavy or mostly static applications.</li>
</ul>



<p class="wp-block-paragraph">Each strategy has trade-offs related to infrastructure complexity, build time, and runtime performance. Modern frameworks increasingly support hybrid approaches that combine these strategies.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h4 class="wp-block-heading">Memoization and Rendering Optimization</h4>



<p class="wp-block-paragraph">Frameworks like React and Vue provide mechanisms such as memoization to avoid unnecessary re-renders. Techniques like <code>useMemo</code>, <code>useCallback</code>, and component-level memoization help reduce computational overhead during UI updates.</p>



<p class="wp-block-paragraph">Efficient state management and careful component design are essential to fully benefit from these optimizations.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">Framework-Specific Approaches</h3>



<h4 class="wp-block-heading">React</h4>



<p class="wp-block-paragraph">React emphasizes fine-grained component updates through its reconciliation algorithm. Performance optimization in React relies heavily on proper component structuring, memoization, and avoiding unnecessary state changes.</p>



<p class="wp-block-paragraph">Frameworks built on top of React, such as Next.js, add advanced performance features like SSR, SSG, and automatic code splitting.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h4 class="wp-block-heading">Angular</h4>



<p class="wp-block-paragraph">Angular provides a more opinionated structure and includes built-in performance tools such as Ahead-of-Time (AOT) compilation and change detection strategies. While Angular applications tend to have larger initial bundles, its tooling supports systematic optimization.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h4 class="wp-block-heading">Vue</h4>



<p class="wp-block-paragraph">Vue offers a balance between flexibility and performance. Its reactivity system enables efficient updates, and Vue’s ecosystem provides strong support for code splitting and SSR through frameworks like Nuxt.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">Use Cases: When Optimization Matters Most</h3>



<p class="wp-block-paragraph">Web performance optimization is particularly critical for:</p>



<ul class="wp-block-list">
<li>Mobile-first applications</li>



<li>Content-heavy platforms</li>



<li>E-commerce websites</li>



<li>Applications targeting regions with limited network bandwidth</li>
</ul>



<p class="wp-block-paragraph">In internal tools or applications with a controlled user base, extreme optimization may be less critical, and developer productivity may take priority.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">Limitations and Trade-Offs</h3>



<p class="wp-block-paragraph">Performance optimization introduces additional complexity. Advanced build pipelines, multiple rendering strategies, and caching layers increase maintenance effort and infrastructure costs.</p>



<p class="wp-block-paragraph">Furthermore, premature optimization can lead to over-engineering. Performance work should therefore be guided by real measurements, such as browser performance audits and user monitoring data.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">Conclusion</h3>



<p class="wp-block-paragraph">Web performance optimization is a fundamental aspect of modern frontend development. While modern frameworks offer powerful abstractions and tooling, they do not eliminate the need for careful performance engineering.</p>



<p class="wp-block-paragraph">By understanding browser rendering behavior, choosing appropriate rendering strategies, and applying proven optimization techniques, developers can build fast, responsive, and scalable web applications. Ultimately, successful performance optimization requires balancing technical complexity with measurable user experience improvements.</p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<h3 class="wp-block-heading">Sources</h3>



<ul class="wp-block-list">
<li><a href="https://developer.mozilla.org/en-US/docs/Web/Performance">https://developer.mozilla.org/en-US/docs/Web/Performance</a></li>



<li><a href="https://web.dev/performance/">https://web.dev/performance/</a></li>



<li><a>https://web.dev/vitals/</a></li>



<li><a href="https://developers.google.com/web/fundamentals/performance/critical-rendering-path">https://developers.google.com/web/fundamentals/performance/critical-rendering-path</a></li>



<li><a href="https://react.dev/learn/render-and-commit">https://react.dev/learn/render-and-commit</a></li>



<li><a>https://nextjs.org/docs/app/building-your-application/optimizing</a></li>



<li><a href="https://angular.io/guide/performance">https://angular.io/guide/performance</a></li>



<li><a href="https://vuejs.org/guide/best-practices/performance.html">https://vuejs.org/guide/best-practices/performance.html</a></li>



<li><a href="https://nuxt.com/docs/guide/concepts/rendering">https://nuxt.com/docs/guide/concepts/rendering</a></li>



<li><a href="https://webpack.js.org/guides/code-splitting/">https://webpack.js.org/guides/code-splitting/</a></li>



<li>https://www.linkedin.com/pulse/boosting-front-end-performance-modern-frameworks-kamal-boukar-ov6me</li>
</ul>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/web-performance-optimization-in-modern-frontend-frameworks/">Web Performance Optimization in Modern Frontend Frameworks</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>A State-of-the-Art Review of Security Vulnerabilities and Risk Assessment Approaches in Mobile Banking Applications</title>
		<link>https://mobile.fhstp.ac.at/allgemein/a-state-of-the-art-review-of-security-vulnerabilities-and-risk-assessment-approaches-in-mobile-banking-applications/</link>
		
		<dc:creator><![CDATA[Ali Pilehvary]]></dc:creator>
		<pubDate>Wed, 21 Jan 2026 20:38:13 +0000</pubDate>
				<category><![CDATA[Allgemein]]></category>
		<guid isPermaLink="false">https://mobile.fhstp.ac.at/?p=15351</guid>

					<description><![CDATA[<p>AbstractThis review examines security vulnerabilities in mobile banking applications and evaluates risk assessment approaches. It highlights common threats, including data breaches, phishing, and insecure authentication, and discusses current methodologies to mitigate risks, ensuring user data protection and secure financial transactions. The paper further analyzes quantitative and qualitative risk assessment methods and discusses emerging security solutions <a class="read-more" href="https://mobile.fhstp.ac.at/allgemein/a-state-of-the-art-review-of-security-vulnerabilities-and-risk-assessment-approaches-in-mobile-banking-applications/">[...]</a></p>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/a-state-of-the-art-review-of-security-vulnerabilities-and-risk-assessment-approaches-in-mobile-banking-applications/">A State-of-the-Art Review of Security Vulnerabilities and Risk Assessment Approaches in Mobile Banking Applications</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></description>
										<content:encoded><![CDATA[
<p class="wp-block-paragraph"><strong>Abstract</strong><br>This review examines security vulnerabilities in mobile banking applications and evaluates risk assessment approaches. It highlights common threats, including data breaches, phishing, and insecure authentication, and discusses current methodologies to mitigate risks, ensuring user data protection and secure financial transactions.</p>



<p class="wp-block-paragraph">The paper further analyzes quantitative and qualitative risk assessment methods and discusses emerging security solutions such as AI-driven threat detection, biometric authentication, and edge computing architectures.</p>



<p class="wp-block-paragraph"><strong>Keywords</strong><br>Mobile Banking, Security Vulnerabilities, Risk Assessment, Cybersecurity, Authentication</p>



<p class="wp-block-paragraph"><strong>1  Introduction</strong></p>



<p class="wp-block-paragraph">Mobile banking applications have rapidly evolved as a primary channel for financial services, providing convenience, flexibility, and 24/7 accessibility to millions of users worldwide. With the widespread adoption of smartphones and mobile networks, users can perform transactions, check balances, pay bills, and manage investments directly from their mobile devices.</p>



<p class="wp-block-paragraph">Effective risk assessment approaches are crucial to identify, prioritize, and mitigate these security weaknesses. Traditional risk assessment frameworks often rely on static analysis, code reviews, and penetration testing; however, modern approaches integrate dynamic behavior analysis, real-time monitoring.</p>



<p class="wp-block-paragraph"><strong>2 Security Vulnerabilities in Mobile Banking Applications</strong></p>



<p class="wp-block-paragraph">Mobile banking applications have become an integral part of financial services, enabling users to perform transactions, check balances, and manage accounts directly from their mobile devices. However, this convenience comes with significant security challenges. Mobile banking applications are vulnerable to a variety of threats, ranging from insecure data storage and transmission to weak authentication mechanisms. According to Batool and Kanwal (2025), the adoption of serverless and edge computing architectures in financial applications introduces both opportunities and risks, as computation and storage occur closer to users, which may expose sensitive data if not properly secured.</p>



<p class="wp-block-paragraph">One of the most critical vulnerabilities is related to authentication and authorization. Many mobile banking applications rely on traditional password-based methods or PINs, which are susceptible to brute-force attacks, phishing, and credential theft (Varghese et al., 2016). Multi-factor authentication (MFA) has been suggested as a more secure approach; however, improper implementation or user negligence can still leave accounts at risk. Additionally, insecure session management may allow attackers to hijack active sessions, gaining unauthorized access to user accounts (Javed et al., 2021).</p>



<p class="wp-block-paragraph">Data storage vulnerabilities are another significant concern. Mobile applications often store sensitive information locally on the device, including account details, authentication tokens, and transaction histories. If this data is not encrypted properly, malware or physical access to the device can lead to serious breaches (Fazil et al., 2025). Moreover, insufficient encryption during data transmission over networks exposes mobile banking traffic to man-in-the-middle (MITM) attacks, potentially compromising confidential information such as credentials or transaction data.</p>



<p class="wp-block-paragraph">Furthermore, application logic flaws can create exploitable gaps. For example, inadequate input validation and error handling may allow attackers to inject malicious code, leading to unauthorized operations or data leakage (Cao et al., 2020). Similarly, the integration of third-party libraries or APIs without rigorous security assessment can introduce hidden vulnerabilities, as external components may not adhere to the same security standards as the core application (Gupta, 2024).</p>



<p class="wp-block-paragraph">Finally, device-level vulnerabilities play a crucial role. Mobile banking applications depend on the underlying operating system and hardware security features. Jailbroken or rooted devices bypass standard security protections, making applications more susceptible to tampering, keylogging, and malware attacks (Siidorow, 2024). Even with secure devices, outdated operating systems or unpatched security flaws can provide attackers with opportunities to exploit the application.</p>



<p class="wp-block-paragraph">Overall, mobile banking applications face a complex landscape of vulnerabilities that span software, hardware, and network layers. Addressing these risks requires a comprehensive approach that combines secure coding practices, robust authentication, encrypted data storage and transmission, and continuous monitoring for emerging threats.</p>



<p class="wp-block-paragraph"><strong>3 Risk Assessment Approaches in Mobile Banking Applications</strong><br>Risk assessment in mobile banking applications is a critical process aimed at identifying, analyzing, and mitigating potential security threats that could compromise sensitive financial data. Several methodologies have been proposed and applied in recent research, focusing on both technical vulnerabilities and user-related risks (Iqra Batool &amp; Sania Kanwal, 2025; Fazil et al., 2025).</p>



<p class="wp-block-paragraph">One widely used approach is quantitative risk assessment, which evaluates risks based on numerical probabilities and potential impacts. This method often involves calculating the likelihood of specific attacks, such as phishing, malware injection, or man-in-the-middle attacks, and then estimating the financial or operational losses that could result. Quantitative methods allow organizations to prioritize security measures by focusing on vulnerabilities with the highest risk scores (Cao et al., 2020).</p>



<p class="wp-block-paragraph">Complementing quantitative methods, <strong>qualitative risk assessment</strong> relies on expert judgment and scenario analysis to evaluate potential threats. Security experts examine the architecture of mobile banking applications, including authentication mechanisms, API endpoints, and encryption protocols, to identify weak points. This approach often employs frameworks like OWASP Mobile Security Testing Guide (MSTG) to systematically assess vulnerabilities (Varghese et al., 2016).</p>



<p class="wp-block-paragraph">Recent studies emphasize <strong>hybrid approaches</strong>, combining quantitative metrics with qualitative insights to create a more comprehensive risk profile. For instance, integrating statistical threat modeling with expert-driven scenario evaluation provides both measurable risk values and strategic recommendations for mitigation (Gupta et al., 2025). Hybrid methods are particularly useful in mobile banking, where user behavior and device heterogeneity introduce complexities not captured by purely quantitative models.</p>



<p class="wp-block-paragraph">Additionally, automated risk assessment tools are gaining prominence. These tools scan mobile applications for known vulnerabilities, insecure code practices, and misconfigured security policies. Tools like static and dynamic analyzers, vulnerability scanners, and AI-driven detection systems help developers identify issues early in the software development lifecycle, reducing the likelihood of exploitable flaws reaching production (Siidorow, 2024).</p>



<p class="wp-block-paragraph">A key challenge in mobile banking risk assessment is accounting for emerging threats such as biometric spoofing, AI-powered social engineering attacks, and zero-day vulnerabilities. Researchers suggest continuous monitoring and adaptive risk evaluation, leveraging machine learning models that analyze transaction patterns, user behavior, and network anomalies in real time (Tyagi, 2025). Such approaches allow banks to respond proactively rather than reactively, minimizing potential financial losses and reputational damage.</p>



<p class="wp-block-paragraph">Finally, risk assessment in mobile banking must consider regulatory compliance and data privacy standards. Frameworks like GDPR, PSD2, and ISO/IEC 27001 impose specific requirements on data handling, authentication, and encryption. Integrating compliance checks within risk assessment ensures that security measures are both effective and legally aligned (Fazil et al., 2025).</p>



<p class="wp-block-paragraph"><strong>4 Detailed Classification of Security Vulnerabilities</strong><br>Mobile banking applications are inherently exposed to a wide range of security vulnerabilities due to their complex architectures, reliance on network communication, and integration with third-party services. These vulnerabilities can be broadly categorized into technical flaws, user-induced risks, and infrastructural weaknesses (Iqra Batool &amp; Sania Kanwal, 2025; Varghese et al., 2016).</p>



<p class="wp-block-paragraph"><strong>4.1 Technical Vulnerabilities</strong><br>Technical vulnerabilities often arise from flaws in software design, coding errors, and insecure APIs. Common issues include improper input validation, weak encryption mechanisms, hard-coded credentials, and insufficient session management. For example, insecure storage of sensitive data such as login credentials, transaction information, or biometric data on mobile devices can allow attackers to extract confidential information if the device is lost, stolen, or compromised (Siidorow, 2024).</p>



<p class="wp-block-paragraph">API endpoints are particularly critical in mobile banking, as insecure APIs can allow unauthorized access, data manipulation, or transaction hijacking. Research highlights that poorly designed APIs, lack of authentication, and absence of rate-limiting can result in severe breaches, compromising both user privacy and financial integrity (Fazil et al., 2025; Gupta et al., 2025).</p>



<p class="wp-block-paragraph"><strong>4.2 Network and Communication Vulnerabilities</strong><br>Mobile banking applications frequently depend on wireless communication networks, which exposes them to threats such as man-in-the-middle (MITM) attacks, packet sniffing, and session hijacking. Weak implementation of TLS/SSL protocols or improper certificate validation can allow attackers to intercept or manipulate data during transmission. Edge cases include attacks on mobile network operators, insecure Wi-Fi hotspots, or compromised VPNs (Tyagi, 2025).</p>



<p class="wp-block-paragraph"><strong>4.3User-InducedVulnerabilities</strong><br>End users contribute significantly to security risk. Common user-induced vulnerabilities include weak passwords, usage of rooted or jailbroken devices, installation of malicious apps, and susceptibility to phishing attacks. User education and behavioral monitoring are therefore essential components of any comprehensive security strategy (Batool &amp; Kanwal, 2025). Behavioral analytics and adaptive authentication mechanisms—such as device fingerprinting, geolocation checks, and biometric verification—help mitigate risks caused by human factors (Cao et al., 2020).</p>



<p class="wp-block-paragraph"><strong>4.4 Infrastructural and Systemic Vulnerabilities</strong><br>Mobile banking systems rely on a distributed infrastructure, including cloud servers, third-party payment gateways, and backend databases. Insecure configuration, improper server hardening, and outdated software versions can open systemic vulnerabilities. Edge computing, while improving performance and latency, introduces additional security challenges as computation moves closer to potentially untrusted environments (Varghese et al., 2016; Gupta, 2024).</p>



<p class="wp-block-paragraph">Additionally, the rapid adoption of technologies such as serverless functions, microservices, and containerized environments in mobile banking increases attack surfaces. Misconfigurations in these environments can lead to unauthorized access, privilege escalation, or resource exhaustion, threatening application integrity (Siidorow, 2024).</p>



<p class="wp-block-paragraph"><strong>4.5 Emerging Threats</strong><br>Emerging threats in mobile banking include AI-powered social engineering, biometric spoofing, deepfake attacks, and malware targeting payment credentials. Attackers exploit these vulnerabilities to bypass authentication, manipulate transactions, or compromise sensitive financial data. Continuous monitoring, anomaly detection, and integration of AI-driven threat intelligence are increasingly recommended to counter these sophisticated attacks (Tyagi, 2025; Javed et al., 2021).</p>



<p class="wp-block-paragraph"><strong>4.6 Mitigation Strategies</strong><br>Mitigating security vulnerabilities in mobile banking applications requires a multi-layered approach:</p>



<ol class="wp-block-list">
<li><strong>Secure Coding Practices:</strong> Adoption of guidelines such as OWASP Mobile Top 10 to minimize software flaws.</li>



<li><strong>Strong Authentication &amp; Authorization:</strong> Multi-factor authentication (MFA), biometric checks, and session management protocols.</li>



<li><strong>Encryption &amp; Data Protection:</strong> End-to-end encryption, secure storage, and proper handling of sensitive data.</li>



<li><strong>Regular Security Testing:</strong> Automated vulnerability scanning, penetration testing, and code audits.</li>



<li><strong>User Awareness Programs:</strong> Educating users on secure usage, phishing prevention, and device hygiene.</li>



<li><strong>Infrastructure Hardening:</strong> Securing servers, APIs, third-party integrations, and cloud-edge components (Fazil et al., 2025; Gupta et al., 2025).</li>
</ol>



<p class="wp-block-paragraph">By addressing these vulnerabilities comprehensively, mobile banking providers can significantly reduce the risk of data breaches, fraud, and regulatory non-compliance, while ensuring trust and safety for end-users</p>



<p class="wp-block-paragraph"><strong>5 Emerging Trends and Future Directions in Mobile Banking Security</strong></p>



<p class="wp-block-paragraph">Mobile banking security continues to evolve rapidly due to technological advancements, increasing cyber threats, and changing user behavior. Understanding emerging trends is critical for designing resilient, future-proof systems that safeguard sensitive financial information while maintaining usability and performance.</p>



<p class="wp-block-paragraph"><strong>5.1 Integration of Artificial Intelligence and Machine Learning</strong><br>Artificial intelligence (AI) and machine learning (ML) are becoming integral to mobile banking security. These technologies allow real-time anomaly detection, fraud prevention, and adaptive authentication. By analyzing patterns of user behavior, AI systems can identify unusual transactions, detect potential account takeovers, and mitigate phishing attacks more effectively than traditional rule-based systems (Iqra Batool &amp; Sania Kanwal, 2025; Javed et al., 2021).</p>



<p class="wp-block-paragraph">Machine learning models can be deployed on edge nodes to monitor network traffic and app usage locally, which reduces latency and preserves privacy. This integration enables proactive security measures, such as automatically flagging suspicious transactions or temporarily restricting access when high-risk behavior is detected (Varghese et al., 2016; Gupta, 2024).</p>



<p class="wp-block-paragraph"><strong>5.2 Biometric and Multi-Factor Authentication Enhancements</strong><br>The reliance on biometric authentication—such as fingerprint, facial recognition, and voice verification—is increasing in mobile banking. Advances in sensor technology and secure storage mechanisms allow mobile applications to implement biometric authentication that is both convenient and resistant to spoofing (Siidorow, 2024).</p>



<p class="wp-block-paragraph">Multi-factor authentication (MFA) is also evolving to include adaptive factors, such as geolocation, device fingerprinting, and behavior-based verification. These contextual factors enhance security without negatively impacting the user experience, creating a balance between convenience and protection (Tyagi, 2025).</p>



<p class="wp-block-paragraph"><strong>5.3 Blockchain and Distributed Ledger Technologies</strong><br>Blockchain technology is emerging as a promising approach for enhancing data integrity and transparency in mobile banking systems. Distributed ledgers provide tamper-evident transaction records and decentralized validation, which can reduce the risk of fraud and unauthorized modifications (Cao et al., 2020).</p>



<p class="wp-block-paragraph">Blockchain integration can also facilitate secure peer-to-peer payments and digital asset management within mobile banking applications. While this technology offers strong security guarantees, its implementation must be carefully managed to ensure scalability, latency, and regulatory compliance (Fazil et al., 2025).</p>



<p class="wp-block-paragraph"><strong>5.4 Zero Trust Architecture and Micro-Segmentation</strong><br>The adoption of zero trust principles is becoming critical for mobile banking applications. In this approach, no entity—whether inside or outside the network—is automatically trusted. Continuous verification of user identity, device integrity, and transaction legitimacy is enforced at every interaction (Varghese et al., 2016).</p>



<p class="wp-block-paragraph">Micro-segmentation complements zero trust by dividing the network and application components into isolated segments. This limits lateral movement by attackers and reduces the impact of potential breaches. For mobile banking applications, these strategies help prevent unauthorized access to sensitive services and backend resources (Batool &amp; Kanwal, 2025).</p>



<p class="wp-block-paragraph"><strong>5.5 </strong><strong>Cloud-Edge Security Convergence</strong><br>The increasing reliance on cloud-edge architectures for mobile banking applications necessitates integrated security measures across distributed environments. Edge computing improves performance and latency but introduces new attack surfaces. Security strategies must include encrypted communication, robust access control, and local threat monitoring on edge nodes (Gupta, 2024; Siidorow, 2024).</p>



<p class="wp-block-paragraph">By implementing consistent security policies across cloud and edge layers, mobile banking providers can ensure end-to-end protection of sensitive financial data while maintaining optimal performance.</p>



<p class="wp-block-paragraph"><strong>5.6 Regulatory Compliance and Privacy by Design</strong><br>Regulatory requirements, such as GDPR, PSD2, and local banking regulations, are shaping mobile banking security strategies. Mobile applications must adhere to strict data protection and privacy standards, which include minimizing data collection, secure storage, and providing transparency to users (Fazil et al., 2025).</p>



<p class="wp-block-paragraph">Privacy by design—integrating privacy considerations into every stage of application development—is becoming a standard approach. This ensures that security measures are not merely reactive but are embedded into the architecture, reducing the likelihood of breaches and regulatory penalties (Tyagi, 2025; Javed et al., 2021).</p>



<p class="wp-block-paragraph"><strong>5.7 Future Research Directions</strong><br>Future research in mobile banking security is expected to focus on:</p>



<ol class="wp-block-list">
<li><strong>AI-Enhanced Threat Intelligence:</strong> Leveraging advanced AI models to predict and prevent sophisticated attacks.</li>



<li><strong>Secure Edge Computing:</strong> Developing lightweight, secure computation on mobile and edge devices to minimize exposure.</li>



<li><strong>Adaptive Authentication:</strong> Dynamic, behavior-aware authentication mechanisms that balance security and usability.</li>



<li><strong>Quantum-Resistant Cryptography:</strong> Preparing for future quantum computing threats that could compromise current encryption standards.</li>



<li><strong>Cross-Platform Security:</strong> Ensuring consistent security across mobile, web, and third-party integrations (Iqra Batool &amp; Sania Kanwal, 2025; Gupta, 2024).</li>
</ol>



<p class="wp-block-paragraph">By addressing these research areas, mobile banking applications can remain resilient against evolving threats, protect user data, and maintain trust.</p>



<p class="wp-block-paragraph"><strong>Conclusion</strong><br>In conclusion, mobile banking applications have become an essential part of modern financial services, offering convenience and accessibility to users worldwide. However, this increased reliance also exposes sensitive financial and personal data to various security threats. This state-of-the-art review highlights the diverse range of vulnerabilities in mobile banking applications, including authentication weaknesses, insecure data storage, improper session management, and susceptibility to malware and phishing attacks. It also emphasizes the importance of systematic risk assessment frameworks, which allow organizations to identify, evaluate, and mitigate potential threats effectively. By combining insights from recent studies, developers and security professionals can implement best practices such as multi-factor authentication, secure coding techniques, regular penetration testing, and continuous monitoring. Furthermore, emerging approaches like AI-driven threat detection, blockchain-based transaction validation, and privacy-preserving cryptographic protocols offer promising directions for enhancing security in mobile banking. Overall, addressing both technical vulnerabilities and human factors is crucial to ensuring a resilient and trustworthy mobile banking ecosystem. Continued research, adherence to security standards, and proactive risk management remain pivotal in safeguarding financial applications against evolving cyber threats.</p>



<p class="wp-block-paragraph"><strong>REFERENCES</strong><strong></strong></p>



<p class="wp-block-paragraph">[1] [Batool, I., &amp; Kanwal, S. (2025). Serverless Edge Computing: A &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Taxonomy, Systematic Literature Review, Current Trends and Research Challenges. arXiv:2502.15775 [cs.NI]. <a href="https://arxiv.org/abs/2502.15775">https://arxiv.org/abs/2502.15775</a></p>



<p class="wp-block-paragraph">[2] Cao, K., Liu, Y., Meng, G., &amp; Sun, Q. (2020). An Overview on Edge Computing Research. IEEE Access, 8, 85714–85728. https://doi.org/10.1109/ACCESS.2020.2991734</p>



<p class="wp-block-paragraph">[3] Dong, Y., Bai, J., &amp; Chen, X. (2020). A Review of Edge Computing Nodes Based on the Internet of Things. In Proceedings of the 5th International Conference on Internet of Things, Big Data and Security (IoTBDS) (pp. 313–320). https://doi.org/10.5220/0009407003130320</p>



<p class="wp-block-paragraph">[4]&nbsp; Fazil, A. W., Ghairat, A., &amp; Kohistani, A. J. (2025). Advancing Web-Based Information Systems Performance via Edge Computing: A Comprehensive Systematic Review. GAME, 2(4), 1–20. https://doi.org/10.29103/game.v2i4.24189</p>



<p class="wp-block-paragraph">[5]&nbsp; Gupta, R., Danilov, C., Eckhardt, J., Bernard, K., &amp; Nahrstedt, K. (2025). Characterizing Container Performance in Edge Computing. In Proceedings of the ACM SIGCOMM 2025 Posters and Demos (pp. 94–96). https://doi.org/10.1145/3744969.3748438</p>



<p class="wp-block-paragraph">[6]&nbsp; OWASP Foundation. (2023). OWASP Mobile Top 10: The Ten Most Critical Mobile Security Risks. OWASP Project Documentation. <a href="https://owasp.org/www-project-mobile-top-10/">https://owasp.org/www-project-mobile-top-10/</a>Conference Name:ACM Woodstock conference</p>



<p class="wp-block-paragraph">[7]&nbsp; Alzubaidi, L., Fadhel, M. A., Al-Shamma, O., Zhang, J., &amp; Duan, Y. (2023). A Survey on Mobile Banking Security: Threats, Vulnerabilities, and Countermeasures. IEEE Access, 11, 28745–28762. <a href="https://doi.org/10.1109/ACCESS.2023.3254187">https://doi.org/10.1109/ACCESS.2023.3254187</a></p>



<p class="wp-block-paragraph">[8]&nbsp; Zhang, Y., Liu, H., Wang, X., &amp; Chen, M. (2024). AI-Based Fraud Detection and Risk Assessment in Mobile Banking Systems. Computers &amp; Security, 134, 103479. https://doi.org/10.1016/j.cose.2023.103479</p>



<p class="wp-block-paragraph"></p>



<p class="wp-block-paragraph"></p>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/a-state-of-the-art-review-of-security-vulnerabilities-and-risk-assessment-approaches-in-mobile-banking-applications/">A State-of-the-Art Review of Security Vulnerabilities and Risk Assessment Approaches in Mobile Banking Applications</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Print2Mobile &#124; Vienna FOUNTAINS &#8211; DISTRICT 19</title>
		<link>https://mobile.fhstp.ac.at/allgemein/print2mobile-vienna-fountains-district-19/</link>
		
		<dc:creator><![CDATA[Ali Pilehvary]]></dc:creator>
		<pubDate>Tue, 28 Oct 2025 08:03:55 +0000</pubDate>
				<category><![CDATA[Allgemein]]></category>
		<guid isPermaLink="false">https://mobile.fhstp.ac.at/?p=15044</guid>

					<description><![CDATA[<p>Introduction On hot summer days, when I go out for daily errands, exercise, or leisure, and sometimes this walk is accompanied by our pet, having access to a drinking fountain becomes essential. Dehydration can quickly become a concern for both humans and animals during long walks or outdoor activities. Therefore, having a simple and accessible <a class="read-more" href="https://mobile.fhstp.ac.at/allgemein/print2mobile-vienna-fountains-district-19/">[...]</a></p>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/print2mobile-vienna-fountains-district-19/">Print2Mobile | Vienna FOUNTAINS &#8211; DISTRICT 19</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></description>
										<content:encoded><![CDATA[
<h2 class="wp-block-heading">Introduction</h2>



<p class="has-text-align-left wp-block-paragraph">On hot summer days, when I go out for daily errands, exercise, or leisure, and sometimes this walk is accompanied by our pet, having access to a drinking fountain becomes essential. Dehydration can quickly become a concern for both humans and animals during long walks or outdoor activities. Therefore, having a simple and accessible solution to locate nearby drinking fountains would be extremely helpful. Such a solution could enhance comfort, safety, and overall enjoyment of outdoor activities during the warm months. It would also promote responsible pet care and encourage more people to spend time outdoors without worrying about access to wate.</p>



<figure class="wp-block-image size-large"><img fetchpriority="high" decoding="async" width="1024" height="800" src="https://mobile.fhstp.ac.at/wp-content/uploads/2025/10/index-4-1024x800.jpg" alt="" class="wp-image-15047"/></figure>



<h2 class="wp-block-heading">Idea</h2>



<p class="wp-block-paragraph">This idea was born from the need to make it easier for people to find public drinking fountains using simple, accessible technology. The concept involves creating a platform that allows users to access information by scanning a <strong>QR code</strong> printed on posters placed around the city. Once scanned, the user is directed to the application, which uses their current location (GPS) to identify and display the nearest drinking fountains.<br>The main goal of this idea is to bridge the gap between urban facilities and everyday needs — ensuring that no one, human or animal, struggles to find drinking water during hot summer days.</p>



<h2 class="wp-block-heading">Implementation</h2>



<p class="wp-block-paragraph">To bring this idea to life, posters titled <strong>“Drinking Fountains of Vienna” (for example, District 19)</strong> are designed and placed in various locations. By scanning the QR code on the poster, users can enter the app and, based on their current location, view a list and map of nearby drinking fountains.<br>Each fountain entry includes details such as distance from the user, images of the location, available facilities (for humans and pets), and the exact postal address.<br>When a user selects a fountain, they can view more information, including <strong>images, descriptions, and navigation options</strong>. With one click on the “Get Directions” button, the app redirects the user to <strong>Google Maps</strong>, providing the easiest route to the selected fountain.</p>



<figure class="wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex">
<figure class="wp-block-image size-large"><img decoding="async" width="1080" height="800" data-id="15084" src="https://mobile.fhstp.ac.at/wp-content/uploads/2025/10/Screenshot_2025-10-23-16-37-41-066_com.android.chrome-1080x800.jpg" alt="" class="wp-image-15084"/></figure>



<figure class="wp-block-image size-large"><img decoding="async" width="1080" height="800" data-id="15085" src="https://mobile.fhstp.ac.at/wp-content/uploads/2025/10/Screenshot_2025-10-23-16-38-00-143_com.android.chrome-1080x800.jpg" alt="" class="wp-image-15085"/></figure>



<figure class="wp-block-image size-large"><img loading="lazy" decoding="async" width="1080" height="800" data-id="15086" src="https://mobile.fhstp.ac.at/wp-content/uploads/2025/10/Screenshot_2025-10-23-16-38-06-760_com.android.chrome-1080x800.jpg" alt="" class="wp-image-15086"/></figure>



<figure class="wp-block-image size-large"><img loading="lazy" decoding="async" width="1080" height="800" data-id="15083" src="https://mobile.fhstp.ac.at/wp-content/uploads/2025/10/Screenshot_2025-10-23-16-38-20-415_com.android.chrome-1080x800.jpg" alt="" class="wp-image-15083"/></figure>



<figure class="wp-block-image size-large"><img loading="lazy" decoding="async" width="1080" height="800" data-id="15087" src="https://mobile.fhstp.ac.at/wp-content/uploads/2025/10/Screenshot_2025-10-23-16-38-38-125_com.google.android.apps_.maps_-1080x800.jpg" alt="" class="wp-image-15087"/></figure>
</figure>



<h2 class="wp-block-heading"><strong>Future Development</strong></h2>



<p class="wp-block-paragraph">In the future, this project can be expanded to include <strong>all districts of Vienna</strong>, and if successful, it could serve as a model for <strong>other cities</strong> as well.<br>Additional features could include a <strong>user review and rating section</strong>, <strong>community reports</strong> on the condition or accessibility of fountains, and even maps of <strong>seasonal or temporary fountains</strong>.<br>Ultimately, this project aims to evolve into an intelligent, user-centered platform that combines technology, urban design, and environmental awareness — contributing to public well-being and sustainable urban living.</p>



<figure class="wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-2 is-layout-flex wp-block-gallery-is-layout-flex"></figure>



<h2 class="wp-block-heading">Image Sources</h2>



<p class="wp-block-paragraph">This project is an <strong>educational university project</strong> created for the purpose of practicing and learning software development and programming skills.</p>



<p class="wp-block-paragraph">The images used in this project were obtained through Google Image Search and are used solely for educational and non-commercial purposes.<br></p>



<p class="wp-block-paragraph"></p>
<p>The post <a href="https://mobile.fhstp.ac.at/allgemein/print2mobile-vienna-fountains-district-19/">Print2Mobile | Vienna FOUNTAINS &#8211; DISTRICT 19</a> appeared first on <a href="https://mobile.fhstp.ac.at">Mobile USTP MKL</a>.</p>
]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
