Box Enterprise Security
summary
An enterprise Android app that enforces SafetyNet API root and CTS checks with server-side JWT validation and a default API quota of ~10,000 calls, plus IP whitelisting and certificate or pin-based device binding. MDM/EMM integrations (AirWatch, MobileIron, MaaS360, Android Enterprise) deliver device policies and remote wipe. Client controls include passcode hashing, flag_secure to block screenshots, DevicePolicyManager encryption checks, Firebase Remote Config for policy rollout, and server-side Box services like Box Shield (ML anomaly detection — e.g. a 24GB download, 1200% spike) and Box Governance for EOL.
AI-written summary · about
chapters (6)
- 0:00Introduction to Box Enterprise Security
- 4:09Securing the device and device trust
- 13:04User authentication methods
- 15:08Securing content access
- 23:36Securing user behavior and governance
- 26:29Q&A
related talks
40mSecurity, an Enterprise perspective
40mBEST PRACTICES FOR ANDROID ENTERPRISE APPLICATION DEVELOPMENT
34mThe World of Device Management Enabled by Android Enterprise
37mThe World of Android Enterprise Every Business App Developer Should Know
22mHERE BE DRAGONS* - THE ENTERPRISE MOBILE SECURITY JOURNEY
23mDo Androids Dream of Electric Fences?
30mTHE POWER OF EMM: DEPLOY ENTERPRISE-READY APPS FASTER
23mπBox: A Platform for Privacy-Preserving Apps