Securing Android: Tackling Advanced Threats and Enhancing App Security
summary
Shows a demo ripping an APK (RootBeer) to reveal clear strings, then compares R8/ProGuard obfuscation to a commercial approach that converts Java into native libraries and encrypts resources and dex files so main activity code and config JSON disappear. Claims about field telemetry: 82% of apps lack proper static protection and 82% lack on-device protection. Covers dynamic threats and tools: Magisk bypasses root checks and Frida instrumentation plus whitebox cryptography for key protection.
AI-written summary · about
chapters (14)
- 0:00Advanced Android threats
- 3:19App security vulnerabilities
- 8:19Static app analysis demo
- 12:03R8 vs advanced obfuscation
- 17:21Preventing app repackaging
- 19:26Dynamic runtime attacks
- 20:28Root detection tools
- 24:01Instrumentation attacks defenses
- 25:06Malware and banking fraud
- 27:18AppSec observability
- 29:04Data encryption keys
- 30:51Security best practices
- 31:54Speed versus security
- 33:19Q&A
related talks
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
45mGoing Beyond Obfuscation: Advanced Techniques for Protecting Android Apps
47mSecuring Android Applications
01h 07mHow to attack (and secure) an Android app: an introduction
28mSecure Development whit Android
34mDemystifying Android Security
33mShielding Your Android App from Attackers
38mAdvanced Techniques for Protecting Android Apps