Securing Android: Tackling Advanced Threats and Enhancing App Security
summary
Shows concrete attacker techniques (rooting with Magisk, runtime injection with Frida), demonstrates overlay attacks that let fraudsters confirm bank transfers while the user sleeps, and explains failures spotted when API keys and certificates live in decompiled APKs. Covers defensive choices: secure enclave where available, white‑box encryption when not, MTD monitoring that flags rooted devices and keyloggers and remote policy updates that can block contactless payments or reduce transaction limits without republishing the app.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:28Mobile threat evolution
- 3:39Rooting and jailbreaking risks
- 6:06Reverse engineering risks
- 8:43Free vs professional tools
- 10:11Protecting data at rest and in use
- 13:02Magisk and rooting growth
- 15:35Overlay attacks on banking
- 18:26Attacks on locked devices
- 19:56Mobile Threat Defense
- 21:43Securing API keys and SSL
- 23:49Security vs performance
- 24:31Live demo: app protection
- 28:10Q&A
related talks
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
34mDemystifying Android Security
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
37mPractical security for Android apps
29mSecuring Android Applications - The not so se…
43mSecurity in Android Applications
24mModern Android App Security: Protecting Code, Keys, and Data
45mHacking and protecting Android apps