Biblioteca Flutter para melhorar a segurança do aplicativo e o monitoramento de ameaças em dispositivos móveis Android e iOS. Saiba mais sobre os recursos disponíveis no site inicial do freeRASP.
Orientação gerada a partir de informações públicas. Apenas para referência.
freerasp é uma biblioteca Flutter projetada para aumentar a segurança de aplicativos móveis por meio da monitoração em tempo real de ameaças em dispositivos Android e iOS. Ela integra capacidades de proteção auto-suficiente de aplicativos em tempo de execução (RASP), ajudando a detectar e responder a possíveis ameaças de segurança, como adulteração, engenharia reversa e acesso não autorizado. Ao aproveitar insights profundos do nível da plataforma, o freerasp fornece aos desenvolvedores mecanismos de defesa proativa sem exigir alterações extensas no código. A biblioteca é ideal para aplicativos que lidam com dados sensíveis ou operam em ambientes de alto risco.
Casos de uso
Proteção de aplicações financeiras
Detectando dispositivos raiz/jailbreak
Prevenção de ataques de injeção de código
Monitoramento de tentativas de depuração
Proteger dados sensíveis do usuário
Principais recursos
detecção de ameaças em tempo de execução
Suporte para Android e iOS
Mínimo esforço de integração
Alertas de segurança em tempo real
Proteção contra adulteração
Indicado para
Desenvolvedores móveis conscientes de segurança
Aplicativos com dados sensíveis
Soluções móveis de nível corporativo
Projetos orientados por conformidade
Ambientes de aplicativos de alto risco
Considerações
Requer entendimento dos conceitos de RASP
Pode afetar levemente o desempenho
Depende do suporte do backend para funcionalidade completa
Não é uma solução de segurança autônoma
Documentação limitada além da página inicial
README original
Snapshot do README original do repositório-fonte vinculado. Consulte o repositório para o conteúdo mais recente.
freeRASP for Flutter
freeRASP for Flutter is a mobile in-app threat detection and security monitoring SDK. It aims to cover the main aspects of RASP (Runtime App Self Protection) and application shielding.
The freeRASP is available for Flutter, Cordova, Capacitor, React Native, Android, and iOS developers. We encourage community contributions, investigations of attack cases, joint data research, and other activities aiming to make better app security and app safety for end-users.
freeRASP SDK is designed to combat
Reverse engineering attempts
Re-publishing or tampering with the apps
Running application in a compromised OS environment
Malware, fraudsters, and cybercriminal activities
Key features are the detection and prevention of
Root/Jailbreak (e.g., su, Magisk, KernelSU, Shamiko, HideMyApplist, unc0ver, checkra1n, Dopamine)
Unlocked or compromised bootloader
Hooking framework (e.g., Frida, LSPosed, Shadow)
UI automation and driven-input attacks (e.g., Appium)
Untrusted installation method
App Data Migration protection
Additional freeRASP features include low latency, easy integration and a weekly Security Report containing detailed information about detected incidents and potential threats, summarizing the state of your app security.
The commercial version provides a top-notch protection level, extra features, support and maintenance. One of the most valued commercial features is AppiCrypt® - App Integrity Cryptogram.
It allows easy to implement API protection and App Integrity verification on the backend to prevent API abuse:
Bruteforce attacks
Botnets
Session-hijacking
DDoS
It is a unified solution that works across all mobile platforms without dependency on external web services (i.e., without extra latency, an additional point of failure, and maintenance costs).
freeMalwareDetection is a powerful feature designed to enhance the security of your Android application by quickly and efficiently scanning for malicious or suspicious applications (e.g. Android malware) based on various blacklists and security policies. It helps to detect apps with suspicious package names, hashes, or potentially dangerous permissions.
After the integration of freeRASP, make sure you visit the freeMalwareDetection repository to learn more about this feature!
:book: Discover the Official freeRASP Documentation
Visit the GitBook page for comprehensive and up-to-date guides, tutorials, and technical documentation specifically for freeRASP. It serves as your go-to resource, offering everything from basic instructions to advanced tips and tricks to help you get the most out of the project.
For integrating freeRASP on the Flutter platform, be sure to follow all the steps in the Integration Guide. This guide provides detailed instructions to help you achieve a smooth and efficient integration.
Be sure to bookmark it and stay informed! :books: :sparkles:.
:rocket: What's New and Changelog
Stay informed and make the most of freeRASP by checking out What's New and Changelog! Here, you’ll discover the latest features, enhancements, and bug fixes we’ve implemented to improve your experience across all platforms, including Android, iOS, Flutter, React Native, Capacitor, and Cordova.
Don’t miss out on any updates and explore the changelog to see how we’re continually making freeRASP better for you!
:sparkles: Enhancements
If you have any ideas for improvements, feel free to raise an issue and mark it with an enhancement label. We track these enhancements using GitHub Projects to keep tasks organized and connected to relevant issues or pull requests.
This project is provided as freemium software, i.e. there is a fair usage policy that imposes some limitations on the free usage. The SDK software consists of open-source and binary parts, which is the property of Talsec. The open-source part is licensed under the MIT License - see the LICENSE file for details.
