Mobile app hardening can be divided into two categories: passive hardening and active hardening. Passive hardening means that the app will be protected against static analyses using techniques such as code obfuscation or string encryption. When active hardening is implemented, you prevent static analyses of your app at runtime. Most commonly used methods are debugger detection and/or root/jailbreak detection.
Your task is to investigate the possibility to create a framework that allows us to apply string encryption and/or class encryption in our Android app. You will be working with our mobile app team and our ethical hacker to see what solution would work best and how this can be applied in new and existing applications.
UP FOR A CHALLENGE?