BEST PRACTICES FOR ANDROID ENTERPRISE APPLICATION DEVELOPMENT
summary
Three practical sections: design and Jetpack guidance, code-heavy security, and deployment. Shows using Network Security Config to block cleartext by default on Android P and to add certificate pinning plus an actual revocation-checking implementation for HTTPS and sockets; demonstrates generating AES keys in the Android KeyStore with device-unlock and secure hardware so raw key bytes are unretrievable; uses SafetyNet Attestation and Play Protect to detect rooted or harmful devices; deploys via Managed Google Play and newly supported Fastlane private-app automation.
AI-written summary · about
chapters (13)
- 0:00Introduction to enterprise apps
- 1:09Design principles for enterprise apps
- 2:53Jetpack and architecture basics
- 3:36Securing network connections
- 6:08Certificate validation code
- 8:55Data encryption and storage
- 12:02Verifying device integrity
- 14:34Single sign-on with Chrome tabs
- 18:03Work profiles and data sharing
- 20:07Managed configurations for apps
- 23:03Kiosk mode and single-use devices
- 24:07Deploying apps with Managed Google Play
- 27:37Q&A on device longevity and security
related talks
34mDemystifying Android Security
47mSecuring Android Applications, The Right Way
37mPractical security for Android apps
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
39mAndroid App Security Fundamentals
37mAndroid Enterprise: the developer's missing manual
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
43mSecurity First Android Apps