Android Apps Security

Android Apps Security provides guiding principles for how to best design and develop Android apps with security in mind. It explores concepts that can be used to secure apps and how developers can use and incorporate these security features into their apps.

This book will provide developers with the information they need to design useful, high-performing, and secure apps that expose end-users to as little risk as possible.

• Overview of Android OS versions, features, architecture and security.
• Detailed examination of areas where attacks on applications can take place and what controls should be implemented to protect private user data
• In-depth guide to data encryption, authentication techniques, enterprise security and applied real-world examples of these concepts

What you’ll learn

• How to identify data that should be secured
• How to use the Android APIs to ensure confidentiality and integrity of data
• How to build secure apps for the enterprise
• About Public Key Infrastructure, encryption APIs and how to implement them in apps
• About owners, access control lists and permissions to allow user control over App properties
• About client-server apps and how to manage authentication, transport layer encryption and server-side security

Who this book is for

This book is for intermediate and experienced Android app developers that are already familiar with writing apps from scratch. It discusses mechanisms on how apps can be secured so that private, end-user data is kept secure on the device and while in transit. If you’re just embarking on the path to Android development, then this book may prove to be a useful companion to other developer guides.

Table of Contents

1. Android Architecture & Security Controls
2. The Foundation of an App
3. Who Has Access?
4. Designing and Developing 3 Sample Apps
5. Using PKI & Encryption
6. Interfacing with Web Services
7. Writing for the Enterprise
8. Designing and Developing 3 More Sample Apps
9. Publishing and Selling Your Apps
10. Malware, Spyware and Your End-User
11. API Reference