Security & Pie
summary
Android 9 (Pie) tightens real things: Google reports two billion monthly devices and Android 9 ships CFI enabled in core components to block memory exploits as 86% of 2016 CVEs were memory related, expands ASLR and DEP across boot and kernel, moves to file‑based encryption with StrongBox hardware‑backed keys and key rotation for APK signatures, and hardens app distribution with monthly security patches plus Play Protect and SafetyNet/DroidGuard telemetry that resists reverse engineering.
AI-written summary · about
chapters (30)
- 0:00Intro
- 1:16Background
- 2:06Mobile
- 2:34Hardware
- 3:03Snapdragon
- 4:05Android
- 4:56Android Verified Boot
- 7:41DEP
- 8:40Android permissive mode
- 9:11Android SELinux
- 9:47Encryption
- 10:14Filebased
- 10:44Keymaster
- 11:59Strongbox
- 12:34CFI
- 13:03Memory
- 13:33We are CFI
- 14:04Stagefright
- 15:09Play Protect
- 15:56Premium Messaging
- 16:29Shammi
- 20:05Mail Fraud
- 20:41Droid Guard
- 21:46APK Files
- 22:18File Tool
- 22:51apktool
- 23:20dex
- 23:49apk signatures
- 24:10bad bugs
- 24:58key rotation
related talks
10mThe state of Android security
39mSecurity on Android: What's next
32mWhat's new in Android security
53mThe Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
40mSecurity, an Enterprise perspective
56mThe Android Security Jungle: Pitfalls, Threats & Survival Tips
43mSecurity in Android Applications
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security