The Mobile App Security Library

Sideloading refers to installing apps on a mobile device from a source outside the device's official app store, like the Google Play Store or Apple’s App Store. This practice bypasses the default protections put in place by these platforms and is often used to access apps not officially available in certain regions or app stores.

A debugger is a tool that helps find and fix bugs in real time. Attackers use them to exploit vulnerabilities, bypass security controls, or tamper with apps.

Code obfuscation is the process of modifying an executable so that it is useless to a hacker while remaining fully functional. The functionality of the code remains unchanged, and code obfuscation helps conceal the logic and purpose of an app’s code. It works through transformations like data, layout, and control flow obfuscation, each targeting different aspects of the code to mask its true structure and logic.

Certificate pinning is a security technique that increases secure communication over the TLS (transport layer security) protocol, like HTTPS. It ties a chosen TLS certificate or public key exclusively to the API server, allowing the application to reliably confirm the server's identity each time it connects. During interactions, the server presents a digital certificate to prove its identity and secures the encryption of data sent through APIs between the client and server. By matching the server’s shown certificate against a predetermined or "pinned" certificate within the app, certificate pinning ensures an additional layer of security, preventing man-in-the-middle (MITM) attacks and ensuring server communication integrity.