Android Apps Security

1. Front Matter

   Pages i-xv

   PDF

2. Introduction

   • Sheran Gunasekera

   Pages 1-15

3. Recap of Secure Development Principles

   • Sheran Gunasekera

   Pages 17-33

4. App Licensing and SafetyNet

   • Sheran Gunasekera

   Pages 35-56

5. Securing Your Apps at Scale

   • Sheran Gunasekera

   Pages 57-89

6. Hacking Your App

   • Sheran Gunasekera

   Pages 91-119

7. The Tool Bag

   • Sheran Gunasekera

   Pages 121-144

8. Hacking Your App #2

   • Sheran Gunasekera

   Pages 145-172

9. Rooting Your Android Device

   • Sheran Gunasekera

   Pages 173-223

10. Bypassing SSL Pinning

    • Sheran Gunasekera

    Pages 225-265

11. Looking Ahead

    • Sheran Gunasekera

    Pages 267-290

12. Back Matter

    Pages 291-294

    PDF

Gain the information you need to design secure, useful, high-performing apps that expose end-users to as little risk as possible. This book shows you how to best design and develop Android apps with security in mind: explore concepts that you can use to secure apps and how you can use and incorporate these security features into your apps.

What You Will Learn

• Identify data that should be secured
  
• Use the Android APIs to ensure confidentiality and integrity of data
  
• Build secure apps for the enterprise
  
• Implement Public Key Infrastructure and encryption APIs in apps
  
• Master owners, access control lists, and permissions to allow user control over app properties
  
• Manage authentication, transport layer encryption, and server-side security

Who This Book Is For

Experienced Android app developers.

• android
• java
• security
• rooting
• hacking
• apps
• enterprise
• knox
• obfuscation

• Singapore, Singapore

  Sheran Gunasekera

Sheran Gunasekera is a security researcher and software developer with more than 13 years of information security experience. He is director of research and development for ZenConsult Pte. Ltd., where he oversees security research in both the personal computer and mobile device platforms. Sheran has been very active in BlackBerry and mobile Java security research and was the author of the whitepaper that revealed the inner workings of the first corporate-sanctioned malware application deployed to its subscribers by the UAE telecommunications operator Etisalat. He has spoken at many security conferences in the Middle East, Europe and Asia Pacific regions and also provides training on malware analysis for mobile devices and secure software development for both web and mobile devices. He also writes articles and publishes research on his security-related blog. 

Policies and ethics