App Defender is a runtime application self-protection solution that will protect your app against malware and security threats. App Defender is the outer layer in the Encap “risk onion” – the layered security framework of Defend, Detect, and React.
This layered approach protects against compromises, prevents attempts to steal data or security credentials, and makes it difficult for cyber criminals to tamper with security controls.
Smart devices are insecure. The Apple iOS and Google Android operating systems have their own unique weaknesses. In particular, the sheer number of Android devices inevitably leads to fragmentation, which combined with user oversight for updates leave many of them lacking the updates necessary to remain safe.
While iOS does not sufer quite the same fragmentation, old devices are not updated as often as needed, and users, frustrated by Apple’s walled garden approach, often jailbreak their devices to unlock additional functionality.
Both operating systems have inherent risks. That iOS and Android provide adequate security for mobile devices and apps is simply a myth.
These are not the only threats to mobile apps from hackers. Attackers will also use debuggers and emulators to gain deeper insight into an application, reverse engineering it so they can attack it more efectively. They may then repackage an app and place it on an unofcial app store so as to trick users into downloading it, compromising the device.
There is a stark choice to be made when using smart devices for authentication
Severely limit the number of devices that can be used or Ensure that even compromised devices can be used securely
There is no longer a need to limit your customers to specific devices, OS updates, or turn away those who have jailbroken their device. With App Defender your app can be used on compromised devices, and in combination with Encao SCA you can configure the security settings according to your risk policy.
Speak to us or one of our partners about how Encap Security can meet the demands of Strong Customer Authentication without compromising on user experience.
Contact us
