Static Anti-Tampering Mechanisms Detected
Description
Static anti-tampering techniques are security mechanisms embedded directly into an application’s binary, configuration, or resource files to protect its integrity while it is at rest (on disk). They aim to prevent or detect unauthorized modifications by incorporating integrity checks (such as hashes, checksums, or signature validation), code obfuscation, and structural protections that make analysis and alteration difficult. These measures may also include anti-repackaging controls and built-in consistency checks that trigger failures or abnormal behavior if tampering is detected, thereby increasing the effort required for attackers to modify and redistribute the application.
Recommendation
This entry is informative, no recommendations applicable.
Links
- OWASP MASTG-TEST-0090: Testing File Integrity Checks (iOS)
- OWASP MASTG-TEST-0038: Making Sure the App is Properly Signed (Android)
- Android APK Signature Scheme v2
- Android App Signing: Sign Your App
Standards
- OWASP_MOBILE_TOP_10:
- M7_2024