Does your Android app expose you to excess risk?
summary
A WhatsApp buffer‑overflow triggered by crafted call packets shows attackers find bugs by static analysis (decompilers, grep) then dynamic analysis (rooted phones, debuggers, hooking frameworks) and fuzzing; dozens to hundreds of bugs appear in a ~50k‑line app, and up to ~10% of devices can be rooted. Repackaging historically delivers ~95% of malware. Defenses combine obfuscation, environmental checks and continuous integrity/anti‑tamper — marketed here as application shielding and offered via Verimatrix’s Protect My App (30‑day trial, code droidny19).
AI-written summary · about
chapters (12)
- 0:00Introduction and speaker intro
- 1:08Why mobile apps are risky
- 4:44Attacker mindset and static analysis
- 6:50Dynamic analysis and fuzzing
- 9:37Android security ecosystem
- 13:47Real-world risks and user behavior
- 17:01IP theft and repackaging attacks
- 19:30Repackaging and malware delivery
- 21:19Defending with obfuscation
- 23:46Anti-tamper and application shielding
- 26:55Protect My App service demo
- 28:41Free trial offer and closing
related talks
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
33mHacking and protection of Mobile Apps and backend APIs
33mWhen Attackers Go Mobile-First with AI
01h 07mHow to attack (and secure) an Android app: an introduction
25mMobile App Security: Threat Landscape
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
42mThe Ways Hackers Are Taking To Win The Mobile Malware Battle
41mOverview of common Android app vulnerabilities