Store에 등록한 어플리케이션의 APK 추출 방지 방법

Store에 등록한 어플리케이션의 APK 추출 방지 방법

• https://www.researchgate.net/post/How_can_I_completely_avoid_reverse_engineering_of_an_Android_APK_Is_this_possible

• 27th Jul, 2013
  SAMEERA ABUGHALYOON
  Palestine Polytechnic University
  If you are looking to stop extracting the apk on a non rooted phone using application like "Astro File Manager" , then while you publish the application on play store there is a check box which say "Dont allow the application to be copied". Please select the same.
  On a rooted phone unfortunately we cannot do any thing to stop this.However following some of these will definitely make it more secure
  - Best way is to use Pro guard
  - Store critical data in the native code and create a SO file for it.
  How ever from Android Version Jelly Bean and on wards, each apk that encrypted using a unique key that is specific to the device before getting downloaded on to you phone.Hence going forward from version's Jelly beans reverse engineering will be quite difficult.

  • 루팅되지 않은 폰이라는 가정하에 : 스토어에 배포할때 check box which say "Dont allow the application to be copied". Please select the same. 해라.

• 루팅된 폰을 대상으론 : 위의 방법이 안먹히니

  • Best way is to use Pro guard
  • Store critical data in the native code and create a SO file for it.
    • 관련 : JNI, Android NDK Toolchain , Crosscompiling
  • 근데... So파일도 역어셈블하면 어차피 다 나오는거아닌가?
    • https://csrc.kaist.ac.kr/blog/2020/06/29/%EB%B0%94%EC%9D%B4%EB%84%88%EB%A6%AC-%EC%97%AD%EC%96%B4%EC%85%88%EB%B8%94%EC%9D%98-%EC%9D%98%EB%AF%B8%EC%99%80-%EC%9B%90%EB%A6%AC-%ED%8C%8C%ED%97%A4%EC%B3%90%EB%B3%B4%EA%B8%B0/
    • 고급기술이라 앵간해선 어렵다고 함.