Application of Reverse Engineering for Security Analysis of Android Applications

Eksponencijalni rast i razvoj tehnologije te informatizacija i digitalizacija društva pridonijeli su porastu broja aktivnih korisnika mobilnih terminalnih uređaja, čime su mobilne aplikacije postale epicentar trenutnih razvojnih trendova. Cilj ovog diplomskog rada jest prikazati analizu sigurnosti Android aplikacija korištenjem postupka obrnutog inženjeringa. Postupkom obrnutog inženjeringa omogućuje se otkrivanje načina rada pojedine Android aplikacije, s ciljem čitanja i razumijevanja programskog koda te pronalaska potencijalnih sigurnosnih propusta i osjetljivih podatka unutar koda. Rad se temelji na prikazu tehnika i različitih alata te njihovih specifikacija namijenjenih provođenju obrnutog inženjeringa, kao i prikazu analize sigurnosti Android aplikacija na temelju praktičnog primjera.Exponential growth and development of technology and informatization and digitalization of society have contributed to the increase in the number of active users of mobile terminal devices, which has made mobile applications the epicenter of current development trends. The purpose of this paper is to present an analysis of the security of Android applications using the reverse engineering procedure. The reverse engineering procedure enables the detection of the mode of operation of an individual Android application, with the aim of reading and understanding the program code and finding potential security vulnerabilities and sensitive data within the code. The paper is based on the presentation of techniques and various tools and their specifications intended for the implementation of reverse engineering, as well as the presentation of security analysis of Android applications based on a practical example