Page 7 - index

Ways That App Are Being Hacked Via Binary Exploits

With so much of your organizational productivity riding on the reliable execution of your
apps, and such a small a barrier for hackers to overcome superficial protection schemes,
Application Hardening and Run-Time Protection are mission-critical security capabilities that

are required to proactively defend, detect, and react to attempted application compromises.
Hardening and Run-Time Protection can be achieved with no impact to source code, via an
automated insertion of “guards” into the binary code. When implemented properly, layers of
guards are deployed so that both the application and the guards are protected, and there’s
no single point of failure.

Arxan enables developers and security engineers to protect applications with such guards.
Arxan’s unique patented guarding technology:

• Defends applications against compromise via a range of techniques including: Code
Obfuscation, Pre-Damage, Encryption, String Encryption, Symbol Stripping and
Renaming

• Detects attacks through Jailbreak or Root Detection, Resource Verification,
Checksum, Debugger Detection, Swizzling/Hook Detection, and other means

• Reacts to ward off attacks with Self-Repair, Custom Responses, and Alerts

Arxan’s approach is unique and scalable, requiring no changes to source-code and making it
easy to integrate into existing applications. Arxan also works with all major computing
platforms, with the ability to standardize on application security process and tools. This
reduces the need to leverage multiple security providers and integrate application protection
solutions.

Recent history shows that despite our best efforts, the “plumbing” of servers, networks, and
end-points that run our apps can easily be breached, so it is high-time to focus on the
application layer!

About the Author

Patrick Kehoe is the Chief Marketing Officer of Arxan Technologies. He
and the team at Arxan are in the business of understanding application
security vulnerabilities and deploying approaches to protect applications -
- building on over 10 years of research and intellectual capital on this
topic. Patrick brings over twenty years of experience working with
software, hardware, and service providers in the High Tech industry. He
holds a degree in Computer Science from Vanderbilt University and a
MBA from the Darden Graduate School of Business at the University of
Virginia. In his spare time, he enjoys triathlons and traveling with his family. Patrick can be
reached at (301) 968-4290 and at the Arxan website http://www.arxan.com

7 Cyber Warnings E-Magazine – July 2014 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide