问题描述
我有一个与Android开发中数据安全有关的问题.现在,我正在一个应用程序中工作,在该应用程序中,我需要将现有数据库保存在资产文件夹中,以便应用程序可以将其复制到内部的可写位置,以避免在首次安装期间从服务器下载大型数据库.但是不幸的是,使用APK倒计时工具一个人可以在资产文件夹中查看包含此数据库文件的文件.是否有一种方法可以防止我的资产文件被分解,以便可以在我的应用程序中确保数据安全.任何帮助将不胜感激.谢谢.
推荐答案
简单的答案是否.总会有某种方式,潜在的黑客可以做到这一点,尽管您可以通过使用一些"加密"方案更难使其变得更难,这意味着您可以使用一些特殊的密钥对数据进行加密,然后使用key,您可以encode>>>>>>>>> decode您的数据如此之多的地方可以使事情更加安全,nactive libs表示您使用native(c,c ++)代码,该代码应包含您的敏感数据并生成libs,通过执行此操作,您正在添加另一层加密是因为本地液体的反向工程的本机形式很难阅读.
问题描述
I've a question related to Data security in Android development. Right now i am working in an application where i need to keep an existing database in assets folder so App can copy it in to the internal writable location to avoid the large database download from server during first time installation. But unfortunately using APK decompiling tool one can view the files in assets folder included this database file. Is there a way to prevent my assets-files from being decompiled so Data security can be assured in my application. Any help would be highly appreciated. Thanks.
推荐答案
Simple answer is no . there will always be some way where a potential hacker can do it's tricks though you can make it harder by using some 'encryption' schemes mean you can encrypt your data with some special key,then with the key you can encode and decode your data so better place to keep things more secure is nactive libs means you using native(c,c++) code which should contain your sensitive data and generate libs, by doing this you are adding an another layer of encryption because reverse engineered native form of native libs are quite hard to read.