Building a Security Module for Android
summary
Company trading app claims production-grade security but demo uses Frida-based instrumentation to inject code, bypass root and anti-tamper checks, and flip client-side business logic. Demo app that blocks rooted devices and PIN brute force gets overridden: Frida hooks change runtime checks and accept attacker input. Presentation shows multi-platform Frida support (Java/Python/C/Android), details attack steps, and proposes a security module with runtime integrity checks, hardened key storage and active detection to block such instrumentation.
AI-written summary · about
chapters (12)
- 0:00Start
- 1:46Crypto Exchange Hacks in 2018
- 2:32Is your app secure?
- 3:39Android app defences
- 6:18Man in the middle attack - How SSL handshake work
- 12:11SSL Pinning - How - OkHttp
- 13:01SSL Pinning - How - Security Config
- 15:36What is Frida?
- 16:13If I am a hacker, what Frida offers me?
- 17:01How does it work?
- 18:02Demo
- 19:53Security Module
related talks
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
44mCatch Me If You Can: Detecting Root and Frida
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
25mFoundations of Dynamic Analysis and Hooking of Android Apps with Frida
01h 07mHow to attack (and secure) an Android app: an introduction
53mAndroid: He protec, but he also attac
43mAttacking Android Applications
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security