Android Security: Attacks and Defenses (Hardcover)

Android Security: Attacks and Defenses is for anyone interested in learning about the strengths and weaknesses of the Android platform from a security perspective. Starting with an introduction to Android OS architecture and application programming, it will help readers get up to speed on the basics of the Android platform and its security issues.

Explaining the Android security model and architecture, the book describes Android permissions, including Manifest permissions, to help readers analyze applications and understand permission requirements. It also rates the Android permissions based on security implications and covers JEB Decompiler.

The authors describe how to write Android bots in JAVA and how to use reversing tools to decompile any Android application. They also cover the Android file system, including import directories and files, so readers can perform basic forensic analysis on file system and SD cards. The book includes access to a wealth of resources on its website: www.androidinsecurity.com. It explains how to crack SecureApp.apk discussed in the text and also makes the application available on its site.

The book includes coverage of advanced topics such as reverse engineering and forensics, mobile device pen-testing methodology, malware analysis, secure coding, and hardening guidelines for Android. It also explains how to analyze security implications for Android mobile devices/applications and incorporate them into enterprise SDLC processes.

The book’s site includes a resource section where readers can access downloads for applications, tools created by users, and sample applications created by the authors under the Resource section. Readers can easily download the files and use them in conjunction with the text, wherever needed. Visit www.androidinsecurity.com for more information.

《Android安全：攻擊與防禦》適合任何對從安全角度了解Android平台的優點和缺點感興趣的人。從介紹Android操作系統架構和應用程式編程開始，它將幫助讀者快速掌握Android平台的基礎知識和安全問題。

本書解釋了Android的安全模型和架構，描述了Android權限，包括清單權限，以幫助讀者分析應用程式並了解權限要求。它還根據安全影響評估了Android權限，並介紹了JEB Decompiler。

作者們描述了如何使用JAVA編寫Android機器人，以及如何使用反編譯工具反編譯任何Android應用程式。他們還介紹了Android文件系統，包括導入目錄和文件，以便讀者可以對文件系統和SD卡進行基本的法醫分析。本書的網站www.androidinsecurity.com提供了豐富的資源。它解釋了如何破解書中討論的SecureApp.apk，並在其網站上提供了該應用程式。

本書還涵蓋了高級主題，如逆向工程和法醫學、移動設備滲透測試方法論、惡意軟體分析、安全編碼和Android加固指南。它還解釋了如何分析Android移動設備/應用程式的安全影響並將其納入企業SDLC流程中。

本書的網站還包括一個資源部分，讀者可以在該部分下載應用程式、用戶創建的工具和作者創建的示例應用程式。讀者可以輕鬆下載這些文件並在需要時與書中的內容一起使用。詳細資訊請訪問www.androidinsecurity.com。