com.gemalto.idp.mobile.core

Class SecurityDetectionService

java.lang.Object

com.gemalto.idp.mobile.core.SecurityDetectionService

public class SecurityDetectionService
extends java.lang.Object

Security Detection services are provided in this class where application can implement interfaces to receive warning when security violation are detected.

Since:

4.4

Constructor Summary

Constructors

Constructor and Description
SecurityDetectionService()

Method Summary

Modifier and Type	Method and Description
static void	clearHookingDetectionListener() Remove HookingDetectionListener.
static java.util.Set<java.lang.String>	getPotentialOverlayAttackAppInfo() Detects if there are apps installed(non-system app) which will potentially do overlay attack, and return the app info.
static void	setDebuggerDetection(java.lang.Boolean enableDebuggerDetection) Set debugger detection to prevent any debugger attach to the application process.
static void	setHookingDetectionListener(HookingDetectionListener listener) Set HookingDetectionListener to receive callbacks when protected methods in SDK are detected as hooked.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityDetectionService

public SecurityDetectionService()

Method Detail

setHookingDetectionListener

public static void setHookingDetectionListener(HookingDetectionListener listener)

Set HookingDetectionListener to receive callbacks when protected methods in SDK are detected as hooked. If the listener is not set, SDK will not protect any methods. It is required to call this before IdpCore.configure(...). By using this option, it potentially opens one attack point, this class must be properly obfuscated.

Parameters:

listener - the listener to receive hooking detection callbacks.

Since:

4.4

clearHookingDetectionListener

public static void clearHookingDetectionListener()

Remove HookingDetectionListener. It is recommended to call this API when the implementation is no longer in use. eg. public class Activity implements HookingDetectionListener { When activity is killed you must remove the listener to avoid leaks. And to add back the listener when the activity is created. By using this option, it potentially opens one attack point, this class must be properly obfuscated.

Since:

4.4

setDebuggerDetection

public static void setDebuggerDetection(java.lang.Boolean enableDebuggerDetection)

Set debugger detection to prevent any debugger attach to the application process. This function will be ignore if the application is deployed on debug mode. It is required to call this before IdpCore.configure(...). This option applies only for native debugger detection. Java debugger deteciton is always set ON in the release binary. By using this option, it potentially opens one attack point, this class must be properly obfuscated.

Parameters:

enableDebuggerDetection - the value to set, true or false. If not set, the default value is false prior to 4.8. Since 4.8, it has been turned ON by default.

Since:

4.6

getPotentialOverlayAttackAppInfo

public static java.util.Set<java.lang.String> getPotentialOverlayAttackAppInfo()

Detects if there are apps installed(non-system app) which will potentially do overlay attack, and return the app info. The complete list of application package names are returned each time the function is invoked. Integrators can maintain a whitelist of applications where it does not need to warn the end-user again for the applications already been trusted.

Returns:

Set of ApplicationID(application package name) of the apps which have been detected have potential to do overlay attack, if found.

Since:

4.9.0