This is the International Mystery Sale
 
 

Special Offers see all

Enter to WIN a $100 Credit

Subscribe to PowellsBooks.news
for a chance to win.
Privacy Policy

Visit our stores


    Recently Viewed clear list


    Lists | April 3, 2015

    David Shields and Elizabeth Cooperman: IMG 50 Books of Literary Collage



    We cowrote and coedited Life Is Short — Art Is Shorter: In Praise of Brevity. We're interested in brief prose (short-shorts and mini-essays),... Continue »
    1. $13.27 Sale Trade Paper add to wish list

    spacer
Qualifying orders ship free.
$38.50
List price: $39.99
New Trade Paper
Ships in 1 to 3 days
Add to Wishlist
available for shipping or prepaid pickup only
Qty Store Section
6 Local Warehouse General- General

Bulletproof Android: Practical Advice for Building Secure Apps (Developer's Library)

by

Bulletproof Android: Practical Advice for Building Secure Apps (Developer's Library) Cover

 

Synopses & Reviews

Publisher Comments:

Battle-Tested Best Practices for Securing Android Apps throughout the Development Lifecycle

 

Android’s immense popularity has made it today’s #1 target for attack: high-profile victims include eHarmony, Facebook, and Delta Airlines, just to name a few. Today, every Android app needs to resist aggressive attacks and protect data, and in Bulletproof Android™, Godfrey Nolan shows you how.

 

Unlike “black hat/gray hat” books, which focus on breaking code, this guide brings together complete best practices for hardening code throughout the entire development lifecycle. Using detailed examples from hundreds of apps he has personally audited, Nolan identifies common “anti-patterns” that expose apps to attack, and then demonstrates more secure solutions.

 

Nolan covers authentication, networking, databases, server attacks, libraries, hardware, and more. He illuminates each technique with code examples, offering expert advice on implementation and trade-offs. Each topic is supported with a complete sample app, which demonstrates real security problems and solutions.

 

Learn how to

  • Apply core practices for securing the platform
  • Protect code, algorithms, and business rules from reverse engineering
  • Eliminate hardcoding of keys, APIs, and other static data
  • Eradicate extraneous data from production APKs
  • Overcome the unique challenges of mobile authentication and login
  • Transmit information securely using SSL
  • Prevent man-in-the-middle attacks
  • Safely store data in SQLite databases
  • Prevent attacks against web servers and services
  • Avoid side-channel data leakage through third-party libraries
  • Secure APKs running on diverse devices and Android versions
  • Achieve HIPAA or FIPS compliance
  • Harden devices with encryption, SELinux, Knox, and MDM
  • Preview emerging attacks and countermeasures

This guide is a perfect complement to Nolan’s Android™ Security Essentials LiveLessons (video training; ISBN-13: 978-0-13-382904-4) and reflects new risks that have been identified since the LiveLessons were released.

Synopsis:

In Bulletproof Android, Godfrey Nolan brings together comprehensive, up-to-date best practices for writing apps that resist attack and won't leak information: yours, or your users. Unlike other Android security books focused on "breaking" code, Bulletproof Android focuses on strengthening code security throughout your entire development lifecycle. Nolan thoroughly addresses crucial issues including:

  • Protecting code that communicates with back-end web servers
  • Safeguarding Android databases, including SQLite and SQLcipher
  • Resisting web service attacks via XSS, SQL injection, and other means
  • Using webviews securely
  • Enabling secure user login and information transmission
  • Protecting code and business rules from reverse engineering
  • Safely integrating third-party libraries
  • Taking advantage of encryption, SELinux, Knox, and Mobile Device Management
  • Futureproofing code: DVM, ART, and beyond
  • And much more

Each tactic and technique is presented with working code examples and practical advice — including expert insights into pros, cons, and tradeoffs. All source code is available for download, and each subsection is supported with a complete sample app that demonstrates security problems and how to solve them.

About the Author

Godfrey Nolan is the founder and president of the mobile and web development company RIIS LLC based in Troy, Michigan, and Belfast, Northern Ireland. This is his fourth book. He has had a healthy obsession with reverse engineering bytecode since he wrote "Decompile Once, Run Anywhere," which first appeared in Web Techniques magazine way back in September 1997. Godfrey is originally from Dublin, Ireland.

Table of Contents

Preface

Acknowledgments

About the Author

 

Chapter 1: Android Security Issues

Chapter 2: Protecting Your Code

Chapter 3: Authentication

Chapter 4: Network Communication

Chapter 5: Android Databases

Chapter 6: Web Server Attacks

Chapter 7: Third Party Library Integration

Chapter 8: Device Security

Chapter 9: The Future

 

Index

Product Details

ISBN:
9780133993325
Author:
Nolan, Godfrey
Publisher:
Addison-Wesley Professional
Subject:
android programming; android development; android security; harden android; dex2jar; decompile android; android + adb; secure android apps
Copyright:
Edition Description:
Trade paper
Series:
Developer's Library
Publication Date:
20141211
Binding:
TRADE PAPER
Language:
English
Pages:
240
Dimensions:
8.9 x 7 x 0.7 in 404 gr

Related Subjects

Computers and Internet » Mobile and Handheld Devices » Android

Bulletproof Android: Practical Advice for Building Secure Apps (Developer's Library) New Trade Paper
0 stars - 0 reviews
$38.50 In Stock
Product details 240 pages Addison-Wesley Professional - English 9780133993325 Reviews:
"Synopsis" by ,

In Bulletproof Android, Godfrey Nolan brings together comprehensive, up-to-date best practices for writing apps that resist attack and won't leak information: yours, or your users. Unlike other Android security books focused on "breaking" code, Bulletproof Android focuses on strengthening code security throughout your entire development lifecycle. Nolan thoroughly addresses crucial issues including:

  • Protecting code that communicates with back-end web servers
  • Safeguarding Android databases, including SQLite and SQLcipher
  • Resisting web service attacks via XSS, SQL injection, and other means
  • Using webviews securely
  • Enabling secure user login and information transmission
  • Protecting code and business rules from reverse engineering
  • Safely integrating third-party libraries
  • Taking advantage of encryption, SELinux, Knox, and Mobile Device Management
  • Futureproofing code: DVM, ART, and beyond
  • And much more

Each tactic and technique is presented with working code examples and practical advice — including expert insights into pros, cons, and tradeoffs. All source code is available for download, and each subsection is supported with a complete sample app that demonstrates security problems and how to solve them.

spacer
spacer
  • back to top

FOLLOW US ON...

     
Powell's City of Books is an independent bookstore in Portland, Oregon, that fills a whole city block with more than a million new, used, and out of print books. Shop those shelves — plus literally millions more books, DVDs, and gifts — here at Powells.com.