JCC logo
OWASP Risks Atlasby Jer Catallo

Issue Details

Code Tampering

mobile08 • Rank #8 in OWASP 2024

Explanation

Code tampering involves modifying app binaries to remove security checks, inject malicious functionality, or extract embedded secrets. Attackers use reverse engineering tools to analyze and modify apps. Once tampered, apps can bypass authentication, leak data, or perform unauthorized actions.

Remedy

Implement code signing verification and integrity checks. Use anti-tampering mechanisms to detect modified binaries. Obfuscate code to increase reverse engineering difficulty. Implement runtime application self-protection (RASP) to detect tampering in production.

YearRankCategory
2016#8mobile08 - Code Tampering
2024#8mobile08 - Supply Chain and Third-Party Dependencies