The Mobile Application Hacker's Handbook (Paperback)

See your app through a hacker's eyes to find the real sources of vulnerability

The Mobile Application Hacker's Handbook is a comprehensive guide to securing all mobile applications by approaching the issue from a hacker's point of view. Heavily practical, this book provides expert guidance toward discovering and exploiting flaws in mobile applications on the iOS, Android, Blackberry, and Windows Phone platforms. You will learn a proven methodology for approaching mobile application assessments, and the techniques used to prevent, disrupt, and remediate the various types of attacks. Coverage includes data storage, cryptography, transport layers, data leakage, injection attacks, runtime manipulation, security controls, and cross-platform apps, with vulnerabilities highlighted and detailed information on the methods hackers use to get around standard security.

Mobile applications are widely used in the consumer and enterprise markets to process and/or store sensitive data. There is currently little published on the topic of mobile security, but with over a million apps in the Apple App Store alone, the attack surface is significant. This book helps you secure mobile apps by demonstrating the ways in which hackers exploit weak points and flaws to gain access to data. * Understand the ways data can be stored, and how cryptography is defeated * Set up an environment for identifying insecurities and the data leakages that arise * Develop extensions to bypass security controls and perform injection attacks * Learn the different attacks that apply specifically to cross-platform apps

IT security breaches have made big headlines, with millions of consumers vulnerable as major corporations come under attack. Learning the tricks of the hacker's trade allows security professionals to lock the app up tight. For better mobile security and less vulnerable data, The Mobile Application Hacker's Handbook is a practical, comprehensive guide.

透過駭客的眼睛來查找真正的漏洞來保護您的應用程式。《行動應用程式駭客手冊》是一本從駭客的角度來解決所有行動應用程式安全問題的全面指南。這本書非常實用，提供專家指導，以發現和利用iOS、Android、Blackberry和Windows Phone平台上行動應用程式的漏洞。您將學習一種經過驗證的方法論，用於進行行動應用程式評估，以及預防、干擾和修復各種類型的攻擊所使用的技術。內容包括數據存儲、加密、傳輸層、數據洩漏、注入攻擊、運行時操作、安全控制和跨平台應用程式，並突出顯示漏洞，以及有關駭客繞過標準安全措施的詳細信息。行動應用程式廣泛應用於消費者和企業市場，用於處理和/或存儲敏感數據。目前對於行動安全的相關主題的出版物很少，但僅在蘋果應用商店中就有超過一百萬個應用程式，攻擊面很大。本書通過展示駭客如何利用弱點和漏洞來獲取數據，幫助您保護行動應用程式。*了解數據存儲的方式，以及加密如何被破解*建立一個環境來識別不安全性和數據洩漏*開發擴展來繞過安全控制並進行注入攻擊*了解適用於跨平台應用程式的不同攻擊方式IT安全違規事件成為大新聞，數百萬消費者面臨風險，因為主要企業受到攻擊。學習駭客的技巧使安全專業人員能夠加強應用程式的安全性。為了更好的行動安全和更少的敏感數據風險，《行動應用程式駭客手冊》是一本實用而全面的指南。