How secure is proguard against reverse engineering?

前端 未结 1 1033
醉酒成梦
醉酒成梦 2021-02-05 19:49

I will be working with very sensitive data in an app. Obfuscation by my definition is not added security, it will only delay the cracker with finite time. Is it possible that Pr

相关标签:
1条回答
  • 2021-02-05 20:09

    Generally, You can make the crackers life harder. The harder you make it, the fewer will remain. Especially if the financial incentive is limited.

    Your code obfuscation options are:

    • Use proguard, it does a good job, not perfect of course, but good
    • Use DexGuard, which can make reverse engineering even harder, like by encrypting strings, or detecting code tampering
    • Write critical parts in C

    Regardless of code obfuscation, make your network protocol also hard to mess around with: encrypt and sign messages, make sure messages can not be repeated (by using time or a sequence), and authenticate the client

    Don't save on disk any clear texts that are sensitive.

    0 讨论(0)
提交回复
热议问题