{
    "type": "bundle",
    "id": "bundle--2bbfd31b-d774-4eff-9888-1db0bdc297db",
    "spec_version": "2.0",
    "objects": [
        {
            "x_mitre_domains": [
                "mobile-attack"
            ],
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "id": "course-of-action--8220b57e-c400-4525-bf69-f8edc6b389a8",
            "type": "course-of-action",
            "created": "2017-10-25T14:48:50.769Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/mitigations/M1009",
                    "external_id": "M1009"
                },
                {
                    "source_name": "TechCrunch-ATS",
                    "description": "Kate Conger. (2016, June 14). Apple will require HTTPS connections for iOS apps by the end of 2016. Retrieved December 19, 2016.",
                    "url": "https://techcrunch.com/2016/06/14/apple-will-require-https-connections-for-ios-apps-by-the-end-of-2016/"
                },
                {
                    "source_name": "Android-NetworkSecurityConfig",
                    "description": "Google. (n.d.). Network Security Configuration. Retrieved December 19, 2016.",
                    "url": "https://developer.android.com/training/articles/security-config.html"
                }
            ],
            "modified": "2018-10-17T00:14:20.652Z",
            "name": "Encrypt Network Traffic",
            "description": "Application developers should encrypt all of their application network traffic using the Transport Layer Security (TLS) protocol to ensure protection of sensitive data and deter network-based attacks. If desired, application developers could perform message-based encryption of data before passing it for TLS encryption.\n\niOS's App Transport Security feature can be used to help ensure that all application network traffic is appropriately protected. Apple intends to mandate use of App Transport Security  (Citation: TechCrunch-ATS) for all apps in the Apple App Store unless appropriate justification is given.\n\nAndroid's Network Security Configuration feature similarly can be used by app developers to help ensure that all of their application network traffic is appropriately protected  (Citation: Android-NetworkSecurityConfig).\n\nUse of Virtual Private Network (VPN) tunnels, e.g. using the IPsec protocol, can help mitigate some types of network attacks as well.",
            "x_mitre_version": "1.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
        }
    ]
}