Defending Your Users
summary
Explains concrete defenses: audit compiled APKs and dependencies with static analysis and abk scanners, enable gradle dependency verification and check gradle wrapper distributionUrl plus SHA-256, run Android 11 data access auditing to spot libraries abusing permissions, use SSL pinning and SQLCipher for high-value data, consider a private artifact repository or building from source, and beware that Play Store app signing/app bundles let Google re-sign and potentially modify distributed APKs.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:01DEFENDING YOUR USERS
- 2:14SETTING THE STAGE
- 14:59YOUR CODE ISSUE DETECTION
- 15:16LIBRARIES THREATS
- 24:07DEVELOPMENT PROCESS
- 30:38YOU ARE WHAT YOU SIGN
related talks
38mAdvanced Techniques for Protecting Android Apps
39mAndroid App Security Fundamentals
45mGoing Beyond Obfuscation: Advanced Techniques for Protecting Android Apps
32mSecuring Android SDKs: A Defense-in-Depth
47mSecuring Android Applications
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
56mThe Android Security Jungle: Pitfalls, Threats & Survival Tips
44mAuditing Your APKs Like a Black Hat Hacker