~/talk

Android iPhone Risks and Solutions

Talkat AppSec California 2014 · on Monday, 2014-01-27· [security]
links:none on file
slides:none on file

Claims exploited: 100% of a 2013 snapshot of top 100 Android apps had cracked versions and paid iPhone apps show ~50–56% crack rates; studies cited include IEEE 2012 and NCSU 2012. Tools and methods shown include IDA Pro, Hopper, dex2jar, otool, strings and Clutch to defeat encryption, plus method swizzling, JNI/assembly patches and jailbreak bypass by checking cydia.app. Practical build is an OWASP reverse engineering and binary protection project with recommendations like anti-debug + multi‑layer checksum guards to raise attacker cost.

AI-written summary · about

  1. 0:00Start
  2. 0:47The Prevalence of App Cracking
  3. 3:48Sources of Untrustworthiness
  4. 4:19Preserving the Integrity of Your Apps
  5. 7:09Tampering with Critical Business Logic
  6. 8:04Proprietary Algorithms
  7. 15:21Android Repackaging Vulnerability
  8. 17:16Security Control Bypass
  9. 17:49Presentation Layer Modification
  10. 18:03Cryptographic Key Replacements or Interception
  11. 22:48String Tables
  12. 23:29Application Decryption
  13. 24:06Examples of Cryptographic Key Theft
  14. 24:28Anti Debugger Checks
  15. 30:10Reverse Engineering and Code Modification Prevention Project
  16. 30:35Conclusions
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.