Android Apps Security

1. Front Matter

   Pages i-xvii

   PDF

2. Android Architecture

   • Sheran Gunasekera

   Pages 1-12

3. Information: The Foundation of an App

   • Sheran Gunasekera

   Pages 13-29

4. Android Security Architecture

   • Sheran Gunasekera

   Pages 31-45

5. Concepts in Action — Part 1

   • Sheran Gunasekera

   Pages 47-54

6. Data Storage and Cryptography

   • Sheran Gunasekera

   Pages 55-85

7. Talking to Web Apps

   • Sheran Gunasekera

   Pages 87-119

8. Security in the Enterprise

   • Sheran Gunasekera

   Pages 121-136

9. Concepts in Action: Part 2

   • Sheran Gunasekera

   Pages 137-162

10. Publishing and Selling Your Apps

    • Sheran Gunasekera

    Pages 163-201

11. Malware and Spyware

    • Sheran Gunasekera

    Pages 203-212

12. Back Matter

    Pages 213-228

    PDF

Android Apps Security provides guiding principles for how to best design and develop Android apps with security in mind. It explores concepts that can be used to secure apps and how developers can use and incorporate these security features into their apps.

This book will provide developers with the information they need to design useful, high-performing, and secure apps that expose end-users to as little risk as possible. 

• Overview of Android OS versions, features, architecture and security. 
• Detailed examination of areas where attacks on applications can take place and what controls should be implemented to protect private user data
• In-depth guide to data encryption, authentication techniques, enterprise security and applied real-world examples of these concepts

Sheran Gunasekera is a security researcher and software developer with more than 13 years of information security experience. He is director of research and development for ZenConsult Pte. Ltd., where he oversees security research in both the personal computer and mobile device platforms. Sheran has been very active in BlackBerry and Mobile Java security research and was the author of the whitepaper that revealed the inner workings of the first corporate-sanctioned malware application deployed to its subscribers by the UAE telecommunications operator Etisalat. He has spoken at many security conferences in the Middle East, Europe and Asia Pacific regions and also provides training on malware analysis for mobile devices and secure software development for both Web and mobile devices. He also writes articles and publishes research on his security-related blog, http://chirashi.zensay.com.

Policies and ethics