Intent Security in Android: Best Practices for Developers
Explore the intricacies of Android intents and their security implications in this 39-minute conference talk from AppSecEU 2014. Delve into how intents enable interprocess communications and collaboration, while also introducing potential vulnerabilities such as spoofing, hijacking, and data theft. Learn about the defensive approaches needed to secure intents properly, including validating assumptions and implementing old techniques in new ways. Gain insights into intent functionality under the hood, best practices for securing your intents, and strategies for developing more secure Android applications. Aimed primarily at app developers, this talk by Andrew Lee-Thorp, a Senior Consultant at Cigital Ltd, covers topics like explicit and implicit intents, intent filters, permissions, and practical examples of both vulnerable and secure implementations.