Secure Coding for Android Applications 1 Secure Coding for Android Applications WHITE PAPER2 Secure Coding for Android Applications WHITE PAPER Table of Contents Author This white paper was written by: Naveen Rudrapp, Senior Security Consultant, McAfee ® Foundstone ® Professional Services 3 Android Application Components 3 Activity 4 Intents 4 Service 4 Content Providers 4 WebView 4 Permissions 4 Secure Coding Recommendations 4 Lock-down application permissions 7 Handle Broadcast Messages carefully 8 Broadcast Messages for Inter-Process Communication (IPC) 9 Insecure storage 10 Insecure storage in process memory 12 Protect pending intents 13 Improper usage of WebView 15 Secure usage of service 16 Content providers 16 Improper use of impl

Join for free to read