Android Security Internals: An In-Depth Guide to Android's Security Architecture
- 7h 31m
- Nikolay Elenkov
- No Starch Press
- 2015
There are more than one billion Android devices in use today, each one a potential target. Unfortunately, many fundamental Android security features have been little more than a black box to all but the most elite security professionals—until now.
In Android Security Internals, top Android security expert Nikolay Elenkov takes us under the hood of the Android security system. Elenkov describes Android security archi¬tecture from the bottom up, delving into the implementation of major security-related components and subsystems, like Binder IPC, permissions, cryptographic providers, and device administration.
You’ll learn:
- How Android permissions are declared, used, and enforced
- How Android manages application packages and employs code signing to verify their authenticity
- How Android implements the Java Cryp¬¬¬tog¬raphy Architecture (JCA) and Java Secure Socket Extension (JSSE) frameworks
- About Android’s credential storage system and APIs, which let applications store cryptographic keys securely
- About the online account management framework and how Google accounts integrate with Android
- About the implementation of verified boot, disk encryption, lockscreen, and other device security features
- How Android’s bootloader and recovery OS are used to perform full system updates, and how to obtain root access
With its unprecedented level of depth and detail, Android Security Internals is a must-have for any security-minded Android developer.
About the Author
Nikolay Elenkov has been working on enterprise security–related projects for more than 10 years. He became interested in Android shortly after the initial public release and has been developing Android applications since version 1.5. His work has led to the discovery and correction of significant Android security flaws. He writes about Android security on his highly regarded blog.
In this Book
-
Android's Security Model
-
PERMISSIONS
-
Package Management
-
User Management
-
Cryptographic Providers
-
Network Security And Pki
-
Credential Storage
-
Online Account Management
-
Enterprise Security
-
Device Security
-
Nfc and Secure Elements
-
Selinux
-
System Updates and Root Access
