Andrea Cioccarelli - Android App Security Fundamentals - droidcon Italy 2022
droidcon Italy was hosted in Turin, 6-7 October. Attended by 400+ participants and broadcast to an additional 200+ participants across the globe.
Android App Security Fundamentals
When building a commercial Android application, security is often an afterthought and not baked into the application's architecture from the beginning.
While professional security is a complex and tricky topic, some techniques can dramatically increase software protection against non-aggressive attacks and still be comparatively straightforward to implement.
In this talk, we'll examine the most common and well-known attack vectors that apps face out in the wild and the available defenses you can implement, focusing on:
Antipiracy countermeasures
Application metadata analysis & status checking
Operative system status assessment
Internal data encryption
Code obfuscation
We will also take a quick look at professional solutions, like Google's SafetyNet Attestation API, and why they work better than any in-house security framework.
This talk is targeted at developers that aren't experienced with security and antipiracy measures and would like to know the basics.
After this talk, you will ideally learn the fundamental aspects of application security on Android.
Andrea Cioccarelli, Android & Kotlin Developer
Subscribe: / droidconitaly
Tweet: / droidconit
/ droidcon-italy
Read: https://t.me/s/Droidconit