Presentation Material
Abstract
There are more than 2.5 billion devices on Android today. That implies any vulnerability can potentially lead to a massive privacy breach or security attack. So, how does the security landscape looks like for Android, are there known privacy limitations or security threats? How do you look into the internals of an Android app? How do you look into the internals of Android itself? This talk will answer these questions for the audience. As a part of the talk, we will cover the following: 1. Overview of Android Security Landscape: Present day’s security and privacy posture of Android, the attacks and challenges in defence. 2. Android Apps Internals: How to reverse engineer Android App and see what it does? 3. FRIDA: Using FRIDA to explore Android Apps Ecosystem 4. Design of malwares and spywares 5. Current situation, exploitation, risks and future.
AI Generated Summary
The talk focused on the security aspects of the Android ecosystem, particularly in the context of hacking and defending Android apps. The researcher presented an overview of the Android landscape, highlighting the diversity of devices and operating system versions, which poses a unique challenge for defending against attacks.
Key findings included the various infection channels used by attackers, such as third-party app stores, sideloading, and trojanized apps. The researcher also discussed prominent attacks, including banking malware, ransomware, and coin mining, which can compromise user data and device security.
The talk also delved into the process of reversing Android apps, which involves decompiling and analyzing the app’s code to understand its behavior. The researcher demonstrated the use of tools like Jadx and Apktool to decompile and modify an app’s code, highlighting the potential risks and vulnerabilities associated with Android apps.
Practical implications of the research include the importance of keeping Android devices and apps up-to-date with the latest security patches, being cautious when downloading apps from third-party stores, and using security solutions to protect against malware and other threats. Additionally, the talk emphasized the need for users to be aware of the potential risks associated with Android apps and to take steps to protect their devices and personal data.