Product introduction
Mobile Security Armor (MSA) provides simple, effective, and stable security protection for mobile applications (apps). MSA improves the overall security of an app to prevent reverse engineering.
Product background
Android application security hardening
The open source nature of Android makes applications vulnerable to piracy, decompilation, and other attacks. These attacks can compromise user data and privacy. mPaaS Mobile Security Armor hardens APK or AAB packages. It then runs compatibility tests and functional regression tests on the hardened packages. This process provides robust protection against cracking.
iOS application security hardening
As cracking and analysis technologies continue to advance, Apple's built-in security measures, such as IPA encryption, are no longer sufficient to secure iOS applications. mPaaS Mobile Security Armor uses a secure compiler to harden core code. This makes reverse analysis significantly more difficult and protects applications against cracking and other attacks.
H5 application security hardening
Security hardening is essential for H5 applications to meet regulatory requirements and improve security. mPaaS Mobile Security Armor obfuscates function and variable names and alters the original execution flow. This makes the resulting JavaScript code difficult to read. This prevents H5 applications from being cracked or pirated and protects the rights of H5 developers.
HarmonyOS application security hardening
The HarmonyOS ecosystem is growing quickly. HarmonyOS NEXT native applications face security threats such as reverse engineering and repackaging. mPaaS Mobile Security Armor provides deep protection for HarmonyOS HAP and App packages. It uses code obfuscation, SO library hardening, and other techniques tailored to HarmonyOS features to deliver multilayer security. This protection defends against attacks such as decompilation and HOOK injection. After hardening, the application undergoes full compatibility and functional regression testing to ensure it runs securely and stably.
Benefits
Simple and out-of-the-box
You can harden Android applications by uploading an APK. You can harden iOS applications using the Xcode compiler or uploading an IPA. You can harden HarmonyOS applications by uploading an HAP or App package. You can harden H5 applications by uploading a JS file.
High stability and compatibility
MSA is built on Alibaba Cloud's mobile security hardening technology. This technology has been proven by services with hundreds of millions of users, such as the Taobao app. It provides a balance between security and compatibility and has a very low crash rate.
It supports ARM, AARCH64, X86, and X64 architectures. It also supports all Android versions 4.2 and later.
The iOS secure compiler supports multiple languages and delivers stable performance. It supports all major device models and is compatible with the latest version of Xcode.
Java2C for enhanced security
Bytecode is converted into native binary code, making it more difficult to crack. The code is compiled into an SO file that is called by the Java Native Interface (JNI). This prevents attackers from using Java reverse engineering techniques.
Enterprise-level support
The service provides an OpenAPI for easy integration with systems such as Jenkins to improve automation. MSA can be used with hotpatching features. It supports major hotpatching solutions, such as mPaaS hotpatching, Alibaba Cloud hotpatching, and Tencent Tinker hotpatching.
Features
The hardening features for Android, iOS, HarmonyOS, and H5 applications are listed below. For more information about these features, see the Glossary.
Hardening features for Android applications:
Standard Edition: Anti-reverse engineering, tamper-proofing, anti-HOOK, anti-root, anti-emulator, SO library hardening, anti-dynamic debugging, anti-memory dump, data leak prevention, anti-multi-instance, and APK/AAB package hardening.
Professional Edition: Anti-HOOK, anti-root, anti-emulator, SO library hardening, anti-dynamic debugging, anti-memory dump, anti-repackaging, asset file protection, anti-multi-instance, VMP protection, protection against SQL injection attacks, anti-hijacking, and APK/AAB package hardening.
Hardening features for iOS applications:
Source code hardening: Constant encryption, instruction replacement, control flow flattening, branch fabrication, junk and bad instructions, call graph obfuscation, symbol encryption, and pointer encryption.
Package hardening: Anti-jailbreak, anti-repackaging, anti-proxy, anti-multi-instance, anti-injection, anti-HOOK, string encryption, ustring-only encryption, anti-dynamic debugging, and UI capture protection (anti-screen recording, anti-screenshot, and anti-screen mirroring).
Hardening features for HarmonyOS applications: Code obfuscation, string encryption, and SO library hardening.
Hardening features for H5 applications: Expression replacement, constant string encryption, specific function hardening, code compression, object key name replacement, anti-formatting, anti-debugging, function and variable name obfuscation, JS domain binding, disabling console output, control flow flattening, fake control flow, and virtualization protection (VMP).