There are nearly a billion Android devices in use today, and every one is a potential security breach. Love it or hate it, the security of Android-based devices is of major concern to users and developers alike. In Android Security Internals, author Nikolay Elenkov delves into Android components and subsystems to give you a very deep and complete understanding of the security i...
There are nearly a billion Android devices in use today, and every one is a potential security breach. Love it or hate it, the security of Android-based devices is of major concern to users and developers alike. In Android Security Internals, author Nikolay Elenkov delves into Android components and subsystems to give you a very deep and complete understanding of the security internals of Android devices. Elenkov’s coverage of security topics ranges from package and user management to the details of cryptographic providers and credential storage. Android Security Internals is destined to be one book that all security-minded Android developers will have to have on their bookshelves.
作者简介
· · · · · ·
Nikolay Elenkov has been working on enterprise security-related projects for the past 10 years. He became interested in Android shortly after the initial public release, and has been developing applications for it since version 1.5. His work has led to the discovery and correction of significant Android security flaws. For two years, he's written about Android security at his h...
Nikolay Elenkov has been working on enterprise security-related projects for the past 10 years. He became interested in Android shortly after the initial public release, and has been developing applications for it since version 1.5. His work has led to the discovery and correction of significant Android security flaws. For two years, he's written about Android security at his highly esteemed blog, nelenkov.blogspot.com.
Custom permissions defined by applications are registered using a “first one wins” strategy: if both app A and B define permission P, and A is installed first, A’s permission definition is registered and B’s permission definition is ignored (because P is already registered) ... This “first one wins” strategy can result in permission protection level downgrade: if A’s permission definition has a lower protection level (for example, normal) than B’s definition (for example, signature), and A is installed first, access to B’s components protected by P will not require callers to be signed with the same key as B. (查看原文)
hanpfei
电子工业出版社2016版
0 有用 梵高的左耳 2016-05-13 12:32:23
介绍了4.x版 的Android系统的安全机制，虽然有点过时，但是基本框架依然正确。 关于root的方面的介绍很少，需要另外一本书辅助。
0 有用 宏斌 2016-08-09 11:51:23
证书管理和账户管理两大模块讲的很清楚，适合研究相关技术的人，要是早发现这本书就好了。
0 有用 pansin 2016-11-02 07:39:20
断断续续的一个月业余时间，终于把这本书读完。从系统研究android安全的角度来看这是一本非常难得的著作。权限、架构、用户、包管理、加密jca、网络jsse、令牌、在线账户、企业安全、设备、nfc&se、加固selinux、bootloader&root论述详细而直接。androud领域圣经级作品，力荐。可惜只到4.4版本，没见作者有更新的计划，遗憾。昨天看到中文版有卖，16年出的，不知翻译得如何... 断断续续的一个月业余时间，终于把这本书读完。从系统研究android安全的角度来看这是一本非常难得的著作。权限、架构、用户、包管理、加密jca、网络jsse、令牌、在线账户、企业安全、设备、nfc&se、加固selinux、bootloader&root论述详细而直接。androud领域圣经级作品，力荐。可惜只到4.4版本，没见作者有更新的计划，遗憾。昨天看到中文版有卖，16年出的，不知翻译得如何。 (展开)