Free lesson 1 of 10 from Mobile Anti-Tamper & Resilience (L1→L5) — Understand and bypass app self-protection (root/JB detection, anti-hook, anti-debug, integrity) on iOS & Android — then make tampering harder. Conceptual, defender-focused.. No account, no card.
Most of a mobile assessment is about confidentiality, integrity and authentication (the MASVS-STORAGE/CRYPTO/AUTH/NETWORK categories). Resilience (MASVS-RESILIENCE) is different: it covers the controls an app adds to make itself harder to tamper with — root/jailbreak detection, anti-hooking, anti-debug, obfuscation and integrity checks.
The key mindset of this course: these controls run on a device the attacker fully owns. They raise cost and slow an analyst down — they never make tampering impossible. Resilience is defence-in-depth, not a security boundary.
🎓 This is an educational, defender-focused course. We explain concepts and remediation — not weaponised exploits.
Approach: Root detection is a resilience control, not an access control. It runs client-side on hardware the user controls, so a determined analyst can observe and neutralise it.
Defensive fix: Treat resilience as one layer. Put the real security server-side (authorization, validation, secrets) and use resilience only to raise attacker cost and feed telemetry — never as the thing that "makes the app secure."
10 lessons · knowledge checks · final exam · verifiable certificate
Unlock all courses · CHF 9/month Buy only this course · CHF 19