DroidconIN-16

Transcript

1. Are you repeating mistakes made by PokemonGo developers ? Presentation

   is WIP - Gives Outlines of Topics Covered, will add code snippets soon

2. Story

3. Pokemon-Go: Case Study What were the top things missed out

   by PokemonGo development team

4. Go-BiS: Case Study What did we miss in our Gojek

   - Gobis - Driver Android App

5. 14 Layers of Security

6. Name Obfuscation Layer 1 <Code Snippet>

7. String Encryption Layer 2 <Code Snippet>

8. Class Obfuscation Layer 3 <Code Snippet>

9. Reflection Layer 4 <Code Snippet>

10. Code Obfuscation Layer 5 <Code Snippet>

11. Class Encryption Layer 6 <Code Snippet>

12. Assets Encryption Layer 7 <Code Snippet>

13. Resource Encryption Layer 8 <Code Snippet>

14. Removing Logging Code and Stacktraces Layer 9 <Code Snippet>

15. Tamper Detection Layer 10 <Code Snippet>

16. Network Layer Security Layer 11 <Code Snippet>

17. SSL pinning Layer 12 <Code Snippet>

18. GRPC Layer 13 <Code Snippet>

19. Environmental Safeguard Checks Layer 14 <Code Snippet>

20. Summary #Do’s #Don’t <WIP>

21. Thanks! Contact us: Abhinandan Kothari Gojek, Indonesia abhinandank@go-jek.com