Databases
StackOverflow2013
Postsdbo
POHow to avoid reverse engineering of an APK file?
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POHow to avoid reverse engineering of an APK file?
    primarykey
    data
    text
    <p>I am developing a <strong>payment processing app</strong> for Android, and I want to prevent a hacker from accessing any resources, assets or source code from the <a href="http://en.wikipedia.org/wiki/APK_%28file_format%29" rel="noreferrer">APK</a> file.</p> <p>If someone changes the .apk extension to .zip then they can unzip it and easily access all the app's resources and assets, and using <a href="http://code.google.com/p/dex2jar/wiki/Faq" rel="noreferrer">dex2jar</a> and a Java decompiler, they can also access the source code. It's very easy to reverse engineer an Android APK file - for more details see Stack Overflow question <em><a href="https://stackoverflow.com/questions/12732882/reverse-engineering-from-apk-to-project">Reverse engineering from an APK file to a project</a></em>.</p> <p>I have used the Proguard tool provided with the Android SDK. When I reverse engineer an APK file generated using a signed keystore and Proguard, I get obfuscated code. However, the names of Android components remain unchanged and some code, like key-values used in the app, remains unchanged. As per Proguard documentation the tool can't obfuscate components mentioned in the Manifest file.</p> <p>Now my questions are:</p> <ol> <li>How can I <strong>completely avoid</strong> reverse engineering of an Android APK? Is this possible?</li> <li>How can I protect all the app's resources, assets and source code so that hackers can't hack the APK file in any way?</li> <li><strong>Is there a way to make hacking more tough or even impossible?</strong> What more can I do to protect the source code in my APK file?</li> </ol>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USCommunity
    1. USsachin003
    plurals
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    3. PL
      singulars
      1. LTLinked
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    3. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POHow to avoid reverse engineering of an APK file?
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POHow to avoid reverse engineering of an APK file?
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POHow to avoid reverse engineering of an APK file?
      1. This table or related slice is empty.
      1. VTUpMod
    1. COIt sounds like you may be using "security by obscurity" if your payment processing scheme relies on the operation of the client remaining secret.
      singulars
      1. POHow to avoid reverse engineering of an APK file?
      1. USPeterJ
    2. CO@PeterJ thanks for your reply, I am using Proguard tool to provide security to my app. http://developer.android.com/tools/help/proguard.html
      singulars
      1. POHow to avoid reverse engineering of an APK file?
      1. USsachin003
    3. COHave you considered writing the important parts of the code in C/C++ and add them as a compiled library? They can be disassembled into assembly code, but reverse-engineering a large library from assembly is extremely timeconsuming.
      singulars
      1. POHow to avoid reverse engineering of an APK file?
      1. USLeo
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload