RIIS Develops Unprecedented New Mobile Security Tool to Stop Android Decompilation in Its Tracks
Poster: SySAdmin
Posted on October 1, 2012 at 7:42:01 AM
RIIS Develops Unprecedented New Mobile Security Tool to Stop Android Decompilation in Its Tracks
HoseDex2Jar prevents hackers from using Dex2Jar to obtain Android app source codes
SOUTHFIELD, Mich., Oct. 1, 2012 /PRNewswire/ -- RIIS, an IT services firm specializing in mobile development, today announced a new mobile security tool that can prevent Android decompilation by hackers on mobile devices.
The tool, HoseDex2Jar, is the first of its kind and prevents would-be hackers from using the Dex2Jar tool as a means to decompile Android apps and obtain access to sensitive data.
Background
Godfrey Nolan, RIIS President, published a book on Android security earlier this year. Decompiling Android shows why Android apps can be decompiled to recover their source code, what it means to Android developers and how to protect code from prying eyes.
An important topic, as the Android marketplace grows and developers are unwittingly releasing apps with back doors allowing people to potentially obtain credit card information and database logins to back-end systems. Android apps are client-side applications which presents a greater security threat because the actual code for the app is downloaded onto the user's mobile device.
Dex2Jar
Android runs applications in .dex format. Dex2Jar is the only tool available to convert Android APK's back into Java .jar files. This allows someone to decompile the .jar file using JD-GUI or JAD into readable source code. Once done, all proprietary source code and other sensitive information stored on backend databases are vulnerable.
HoseDex2Jar
RIIS knew if they could figure out a way to stop Dex2Jar from functioning, they could protect Android apps from being decompiled at all, thus protecting the apps from malicious attackers. RIIS started investigating to see if Dex2Jar had any limitations they could expose. HoseDex2Jar was born.
"Developers can take steps such as using tools like ProGuard to obfuscate their code, but up until now, it has been impossible to prevent someone from decompiling an app," said Nolan.
"We realized if there was a way to stop Dex2Jar, we would stop all Android Decompilation. HoseDex2Jar does just that. It stops Dex2Jar by inserting harmless code in an Android APK that confuses and disables Dex2Jar and protects the code from decompilation. We're now able to go a step beyond obfuscation and prevent hackers from decompiling an APK into readable java code. This is huge for companies with Android apps available on Google Play."
To try HoseDex2Jar, visit http://www.decompilingandroid.com
About RIIS
RIIS is an IT services provider that partners with organizations that need consulting or development expertise to deliver customizable solutions with real business value, specializing in mobile development and security. Always on the cutting edge of technology, RIIS uses top talent and the most robust software and processes to deliver custom development solutions to clients that exceed their expectations. Visit http://www.riis.com.
Contact:
Stacy Masch
Director of Marketing
RIIS
20750 Civic Center Drive
Suite 380
Southfield, MI 48076
(248) 286-1224
smasch@riis.com
http://www.riis.com
This press release was issued through eReleases® Press Release Distribution. For more information, visit http://www.ereleases.com.
SOURCE RIIS
RIIS
Web Site: http://www.riis.com
HoseDex2Jar prevents hackers from using Dex2Jar to obtain Android app source codes
SOUTHFIELD, Mich., Oct. 1, 2012 /PRNewswire/ -- RIIS, an IT services firm specializing in mobile development, today announced a new mobile security tool that can prevent Android decompilation by hackers on mobile devices.
The tool, HoseDex2Jar, is the first of its kind and prevents would-be hackers from using the Dex2Jar tool as a means to decompile Android apps and obtain access to sensitive data.
Background
Godfrey Nolan, RIIS President, published a book on Android security earlier this year. Decompiling Android shows why Android apps can be decompiled to recover their source code, what it means to Android developers and how to protect code from prying eyes.
An important topic, as the Android marketplace grows and developers are unwittingly releasing apps with back doors allowing people to potentially obtain credit card information and database logins to back-end systems. Android apps are client-side applications which presents a greater security threat because the actual code for the app is downloaded onto the user's mobile device.
Dex2Jar
Android runs applications in .dex format. Dex2Jar is the only tool available to convert Android APK's back into Java .jar files. This allows someone to decompile the .jar file using JD-GUI or JAD into readable source code. Once done, all proprietary source code and other sensitive information stored on backend databases are vulnerable.
HoseDex2Jar
RIIS knew if they could figure out a way to stop Dex2Jar from functioning, they could protect Android apps from being decompiled at all, thus protecting the apps from malicious attackers. RIIS started investigating to see if Dex2Jar had any limitations they could expose. HoseDex2Jar was born.
"Developers can take steps such as using tools like ProGuard to obfuscate their code, but up until now, it has been impossible to prevent someone from decompiling an app," said Nolan.
"We realized if there was a way to stop Dex2Jar, we would stop all Android Decompilation. HoseDex2Jar does just that. It stops Dex2Jar by inserting harmless code in an Android APK that confuses and disables Dex2Jar and protects the code from decompilation. We're now able to go a step beyond obfuscation and prevent hackers from decompiling an APK into readable java code. This is huge for companies with Android apps available on Google Play."
To try HoseDex2Jar, visit http://www.decompilingandroid.com
About RIIS
RIIS is an IT services provider that partners with organizations that need consulting or development expertise to deliver customizable solutions with real business value, specializing in mobile development and security. Always on the cutting edge of technology, RIIS uses top talent and the most robust software and processes to deliver custom development solutions to clients that exceed their expectations. Visit http://www.riis.com.
Contact:
Stacy Masch
Director of Marketing
RIIS
20750 Civic Center Drive
Suite 380
Southfield, MI 48076
(248) 286-1224
smasch@riis.com
http://www.riis.com
This press release was issued through eReleases® Press Release Distribution. For more information, visit http://www.ereleases.com.
SOURCE RIIS
RIIS
Web Site: http://www.riis.com