Safety Net
SANA RAHIM
6706
Been developers….
What if Someone Modify your app??
What If your app is deployed on Rooted device?
What if from you're app threated website are surfed?
What if your app has Malicious Traffic???
Safety Net API
Safety Net is the brand name for security services on Android.
Safety Net API is part of the Google Play services released in
version 7.0.
 Designed to be run on any Android device (with Google
Play).
 independent from device manufacturer
Safety Net Consists…
Safety Net Attestation API
Safety Net Safe Browsing API
Safety Net reCAPTCHAAPI
Safety app verification API
Safety Net Attestation API
The Safety Net attestation API is a Google Play Services API that any
developer can use in order to gain a degree of assurance that the device
their application is running on is “CTS compatible.”
This analysis can help you determine if your app will work as expected on
the device where it is installed. The service evaluates both software and
hardware characteristics of the device.
Obtaining API Key
Google console
Add dependency
Permissions
Add Generated key to Strings xml file
Set connection to Google Play Service
Generate Nonce
Extracting from JSON
Any Question???

Google SafetyNet API

Editor's Notes

  • #3 The SafetyNet Attestation API helps you assess the security and compatibility of the Android environments in which your apps run. You can use this API to analyze devices that have installed your app. SafetyNet examines software and hardware information on the device where your app is installed to create a profile of that device. SafetyNet provides services for determining whether a URL has been marked as a known threat by Google. Your app can use this API to determine whether a particular URL has been classified by Google as a known threat. Internally, SafetyNet implements a client for the Safe Browsing Network Protocol v4 developed by Google. Both the client code and the v4 network protocol were designed to preserve users' privacy and keep battery and bandwidth consumption to a minimum. Use this API to take full advantage of Google's Safe Browsing service on Android in the most resource-optimized way, and without implementing its network protocol. The SafetyNet service includes a reCAPTCHA API that you can use to protect your app from malicious traffic. reCAPTCHA is a free service that uses an advanced risk analysis engine to protect your app from spam and other abusive actions. If the service suspects that the user interacting with your app might be a bot instead of a human, it serves a CAPTCHA that a human must solve before your app can continue executing.