Secure Mobile Application Development

[Nytro]

Contents
Understanding the Risk.............................................................................................................. 3
Communication.......................................................................................................................... 5
Transport Layer Security (TLS) .............................................................................................. 5
Certificate Pinning .................................................................................................................. 6
Data Storage.............................................................................................................................. 9
Binary Protections.....................................................................................................................14
Obfuscation ...........................................................................................................................15
Root/Jailbreak Detection .......................................................................................................15
Debug Protection...................................................................................................................17
Hook Detection......................................................................................................................18
Runtime Integrity Checks.......................................................................................................20
Attacker Effort ...........................................................................................................................21
Grading Applications.................................................................................................................22

Download: http://file.digitalinterruption.com/Secure Mobile Development.pdf