Week 16 - application security part 2

Question 1

Application security control is?

Answer 1

techniques to prevent an application from behaving in a way that can compromise the security of data

Question 2

code obfuscation

Answer 2

used against reverse engineering - hide information using encryption

Question 3

anti debugging in apps

Answer 3

anti debugging code - identifies debugging techniques and blocks them

Question 4

anti tampering in apps

Answer 4

checking signature

Question 5

integrated checking apps

Answer 5

hardening by inserting small chunk of code “checkers” - checkers perform tests during run time - alerting user / disabling

Question 6

anti-rooting in apps

Answer 6

to modify aspects of android OS, requires escalated privilages

Question 7

jail protection in apps

Answer 7

remove restriction by manufacturer - security controls compromised - vulnerably to third parties

Question 8

Runtime application self protection solutions (RASP)

Answer 8

an umbrella term for app hardening - focus on operational security - can block attempts to exploit vulnerabilities

Question 9

fuzzing is?

Answer 9

automated testing - discover code error and vulnerabilities

Question 10

sandboxing?

Answer 10

running apps, website and data in isolated environments - developers can inspect codes