SSL proxy attacks on mobile devices and their prevention

Abstract

Most of mobile applications tend to function in an insecure manner whenever they are presented with SSL certificates which cannot be trusted. This is true for the applications which are not web browsers and need to connect/communicate with the internet as a part of their operation. This paper intends to research and show if proxy SSL based attacks can be used to steal user's credentials when they enter them on mobile applications.