NDLI: Defending Your Android App

Please wait, while we are loading the content...

Framework for Autonomous Delivery Drones

Evolution of Cybersecurity Issues In Small Businesses

Certification with Multiple Signatures

Defending Your Android App

Validating the Assessment Metrics for Mobile Health Apps: Preliminary Outcomes from a Pilot Study

A Man-in-the-Middle attack against OpenDayLight SDN controller

Information Technology Research in the Academy: Insights from Theses and Dissertations

An Open-Source Honeynet System to Study System Banner Message Effects on Hackers

Secure and Smart Media Sharing Based on a Novel Mobile Device-to-Device Communication Framework with Security and Procedures

Developing Automated Input Generator for Android Mobile Device to Evaluate Malware Behavior

MP3 Steganography Techniques

A Study on Botnets Utilizing DNS

Studying the Effect of Multi-Query Functionality on a Correlation-Aware SQL-To-MapReduce Translator

Defending Your Android App

Content Provider	ACM Digital Library
Author	Sierra, Felipe Ramirez, Anthony
Abstract	In recent years, applications in the Google Play Store have been targets for attackers. Hackers have used a slew of techniques to analyze and modify Android developers' apps. Attackers are modifying app content so they can take advantage of unknowing users. They are also analyzing app content so they can create clones of legitimate apps. Using techniques like reverse engineering, debugging attacks, and dynamic library manipulation, attackers are hacking android apps. We chose to test these techniques against certificate pinning, a method used to authenticate SSL/TLS certificates to prevent MiTM attacks. The research we conducted focused on: (1) Finding apps from the Google Play Store that employ certificate pinning as a security measure for its communications. (2) Studying the three different methods (debugging attacks, reverse engineering, and dynamic library manipulation) used for bypassing certificate pinning on Android Devices. (3) Testing the apps with each tool to see if we could bypass the certificate pinning. (4) After determining the effectiveness of the three methods, we decided to research and develop practices that would allow developers to harden their applications. Our objective is to show these deterrents succeed at protecting against these attacks.
Starting Page	29
Ending Page	34
Page Count	6
File Format	PDF
ISBN	9781450338363
DOI	10.1145/2808062.2808067
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-09-29
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Dynamic library manipulation Reverse engineering Debugging attacks Certificate pinning
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in