Android Security Internals
by Nikolay Elenkov · Nikolay Elenkov
Nikolay Elenkov dissects Android's security architecture at the source level: package management, permission enforcement, the keystore and crypto providers, account management, and device encryption. Prepares you to reason about platform internals rather than just app-layer APIs.
This link may earn us a small commission at no extra cost to you. Affiliate disclosure
More resources on Mobile Security
OWASP Foundation
Nonprofit foundation publishing open web application security standards and guides, including the OWASP Top Ten, the Application Security Verification Standard, the Web Security Testing Guide and the Cheat Sheet Series, used to identify, test for and prevent common web vulnerabilities.
Android Developers Security
Google's official security guidance for Android app developers, covering permissions, secure data storage, network encryption, WebView handling, and inter-app communication. After reading, you can audit an app against Android's platform security expectations and fix common weaknesses.
Mobile Application Security
Learn mobile app security best practices with this OWASP course. Protect your apps from vulnerabilities and build secure mobile experiences.
mobile-security.gitbook.io
An online GitBook guide dedicated to mobile security, compiling concepts, threats, and best practices for securing mobile apps. It offers structured content on threat modeling, secure development, and practical testing guidance for Android and iOS platforms.
iOS Application Security
David Thiel covers the iOS security model, keychain and data protection, network and TLS handling, IPC, and common flaws in Objective-C and Swift code. You finish able to audit an iOS app and its stored data for weaknesses.