Introduction to Application Security

Author: idarwin
Published? true
FormatLanguage: AsciiDoc

Discussion:

The notions of computer security are important enough to merit a chapter. I have resisted the temptation to place this chapter at the end of the book, as that would imply that security is something that can be bolted on at the end of the development cycle. Security is at least as important as testing: just as there is no payoff for getting the wrong answer quickly, so there is no payoff for getting the correct answer but sending the user's credit card number to hackers in Lower Slobovia. Like test-driven development, security can only come from developers' attitudes. This chapter is here to help guide you to some of these attitudes.

For More Information

OWASP Mobile

Hacking Android book

Acknowledgement

I was reminded of the importance of security in the Android context at a presentation by Kristina Balaam at the Google Android Meetup in Toronto, May, 2018. Some of the ideas in this chapter are from my own work and some are from Kristina's presentation.