3 ms·
I would bet that static analysis is going to be one of the top reasons. Being able to automate the process of analyzing code for leaked keys, outdated/vulnerabl
by ryhanson 11y ago
I would bet that static analysis is going to be one of the top reasons. Being able to automate the process of analyzing code for leaked keys, outdated/vulnerable libraries, insecure storage, permissions, etc.
Here is an open-source tool I've used in the past to do quick static security checks on APKs: https://github.com/ajinabraham/Mobile-Security-Framework-MobSF https://github.com/ajinabraham/Mobile-Security-Framework-Mob...
It also supports dynamic analysis, but I haven't used that portion of it yet.
I, too, am interested in the other enterprise tools that are built on top of this though.