Catch Me If You Can: Detecting Root and Frida
summary
The talk explains methods to detect rooted Android devices, custom firmwares and emulators, and how to detect the Frida dynamic instrumentation toolkit. It describes Frida’s capabilities for injecting code into apps and presents a concrete detection technique and related checks that can be integrated into mobile apps to harden them against these threats.
AI-written summary · about
chapters (15)
- 0:00Welcome and introduction
- 1:28What is root and security
- 3:35Linux access control
- 6:05DAC and MAC flaws
- 8:17SELinux in Android
- 12:51SELinux and app isolation
- 13:14Android root types
- 17:31Why root is needed
- 19:56Trust Execution Environment
- 22:09Hardware Station checks
- 24:57eFUSE and Verified Boot
- 28:31What is Frida and how it works
- 31:00Detecting Frida
- 34:54Summary and takeaways
- 35:14Q&A
related talks
25mFoundations of Dynamic Analysis and Hooking of Android Apps with Frida
28mBuilding a Security Module for Android
43mAttacking Android Applications
48mA Novel Runtime Technique For Identifying Malicious Applications
38mAdvanced Techniques for Protecting Android Apps
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
29mInstrumenting binaries with Frida
53mAndroid: He protec, but he also attac