Transforming App Security
summary
Minify with R8 and add baseline profiles to get about 30% startup improvement and smaller APKs, but fragile keep rules and inherited consumer rules often negate gains. An alternative instruments the minified build with an instrumentation CLI/Gradle plugin, records reflection and hot paths on a device, auto-generates targeted keep rules and baseline inputs, then compiles with string/class encryption, control‑flow obfuscation and runtime detections. Results show an extra ~5% perf plus stronger, polymorphic obfuscation and runtime tamper detection.
AI-written summary · about
chapters (9)
- 0:00App security transformation
- 1:45Balancing quality attributes
- 3:31Performance with R8 and profiles
- 7:01Keep rules challenges in R8
- 9:06Baseline profiles for performance
- 11:37Security benefits of minification
- 12:41Advanced security toolkit
- 15:53Free tools vs guided security
- 17:40Q&A
related talks
15mApp Security from Necessary Evil to Performance Advantage
36mPractical obfuscation guide
28mDevSecOps: Balancing development and security
31mCommonly Overlooked Areas of Security: Revisited
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
33mHow ProGuard Works
33mShielding Your Android App from Attackers
45mGoing Beyond Obfuscation: Advanced Techniques for Protecting Android Apps