Prezentacja z meetupu grupy "Uszanowanko Programowanko", tematyka Bezpieczeństwo: http://www.uszanowanko.pl/bezpieczenstwo Autor: Michał Bujalski

1. Android App security.

2. Android security layers

3. Application Sandbox
Apps run in separate processes.

4. Application Sandbox
Apps run in seperate processes.
Restricted access to other apps data (db, files).

5. Best practices
Require minimum permissions.

6. Best practices
Use Internal Storage rather than External
Storage.

7. Best practices
Encrypt your files.

8. Best practices
Do not use SMS messages to send sensitive
data.

9. Best practices
Track installation id’s rather than device id’s
(Universally Unique Identifier).

10. Best practices
Avoid hard coded keys.

11. Best practices

12. Best practices
WebViews:
- enable JavaScript only for trusted sites
- avoid passing Java objects to JavaScript

13. Best practices
Do not store any sensitive data in Assets folder
in your app.

14. Best practices
Prefer HTTPS connections.

15. Best practices
Stick to platform guidelines (e. g.
ContentProviders to handle database).

16. Thank you