App shielding solution AppCAMO secures Hybrid(Cross-Platform) app

"App obfuscation solution AppCAMO protects Android native apps such as Java and Kotlin, iOS native apps such as Objective-C and Swift, and Cross-Platform apps(hybrid apps) such as Cordova, Ionic, React Native, and Cordova extensions against reverse engineering and tampering."

When developing mobile apps, Java and Kotlin are typical for Android, and Objective-C and Swift are common for iOS. However, to develop apps in these languages, developers need to understand both languages ​​and OS platforms. It requires more developers and, of course, it also increases the cost of operation & maintenance.

Fig.1 Cross-Platform React Native

So, to solve this problem, cross-platform Cordova, Ionic, React Native, Cordova extensions, and etc. have emerged. These are open source frameworks that can be developed with JavaScript and can be developed simultaneously for Android and iOS apps with a single programming language.

Fig. 2 Cross-Platform Cordova and Ionic

In the case of hybrid apps based on these frameworks and custom frameworks, important operation logic of the apps is written in JavaScript, which is in the resource area, so it is not subject to name obfuscation or code encryption. So, in this case, we encrypt them with AppCAMO's hybrid app encryption technology to ensure that no code or data is exposed. This hybrid app security technology is highly secure and powerful, but difficult to implement, so other app security vendors mainly provide JavaScript obfuscation or JavaScript string encryption.

AppCAMO provides strong protection by encrypting the entire JavaScript, which is an important core logic of hybrid apps developed with Cordova, Cordova Extension, Ionic, React Native frameworks, and their custom frameworks. In addition, the native code of hybrid apps is also secured with AppCAMO’s static analysis prevention(Code Hardening) and dynamic analysis prevention(RASP : Runtime App Self-Protection).

AppCAMO's static analysis prevention protects APK or AAB files from hacking.

decompile prevention,

repackaging prevention,

class name obfuscation,

method name obfuscation,

field name obfuscation,

code encryption,

string encryption,

resource encryption,

hybrid app encryption,

custom hybrid app encryption,

debug information removal,

Logcat log removal and more.

 

AppCAMO's dynamic analysis prevention blocks hacking attempts while apps are running.

tamper detection,

debugger detection,

root detection,

emulator detection,

root hide detection(Magisk/Magisk Hide detection)

Hacking tool detection(Frida detection),

API hooking prevention,

memory hacking prevention,

screen capture prevention,

clipboard copy prevention,

app usage time control, and more.

​

JavaScript frameworks such as React Native, Cordova, and Ionic simplify app development, but because they are not compiled to native code, they often suffer from poor app performance. However, Flutter is increasingly being chosen by developers because it allows them to build high-performance apps with fewer resources than native apps.

Fig. 3 Cross-Platform Flutter

AppCAMO will also provide security support for these Flutter frameworks. We would like to end this post today with a promise to give you good news soon.

"App security solution AppCAMO provides multi-layered protection technology that strongly blocks app hacking, and has world-class app security technology by providing app hacking detection and prevention technology even at runtime. We are expanding our sales not only in Korea, but also in overseas markets such as Southeast Asia and the United States."

If you are interested in this solution or have any questions, please feel free to contact us below.

Email : appcamo@appcamo.com

Phone : +82-2-6951-3296

www.appcamo.com