Best practices for shielding mobile apps from emerging threats
summary
Defines app shielding as runtime and at‑rest defenses, claims Promon tech is integrated into 1 billion end users, and demonstrates concrete attacks: reverse engineering, repackaging, debugger and hooking frameworks like Frida, malicious keyboards, emulators and Android accessibility abuses. Shows R8/obfuscation limits and control‑flow flattening as stronger obfuscation, describes quarterly top 100 financial apps audit (Q2) that finds the vast majority leak data to accessibility services while about 8% defend properly.
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker intro
- 1:11What is app shielding
- 4:05Static vs dynamic protection
- 8:01Code obfuscation demo
- 12:00Runtime protection threats
- 15:19UI overlay and keyboard risks
- 17:05Accessibility service threats
- 19:12App threat report findings
- 21:02Best practices summary
related talks
40mBest practices for shielding mobile apps from emerging threats
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
33mHacking and protection of Mobile Apps and backend APIs
45mGoing Beyond Obfuscation: Advanced Techniques for Protecting Android Apps
15mBest practices for shielding mobile apps from emerging threats
38mAdvanced Techniques for Protecting Android Apps
20mAttack & Defend, Defend & Monitor, Monitor & Respond