search

talsec / Free-RASP-Flutter

Flutter library for improving app security and threat monitoring on Android and iOS mobile devices.
https://github.com/talsec/Free-RASP-Community
MIT License
189 stars 18 forks source link

Threat detection order #78

Closed reyesmfabian closed 1 year ago

reyesmfabian commented 1 year ago

Hi,

Is there a way to set the order of threat detection?

We will set certain unique actions for each type of threat according to its severity. For example for "emulators" we will show a warning message, for others like "hooks" we will close the app.

We would like to know if there is a possibility to tell the SDK which threats to analyze first to avoid possible problems in UX, for example that the SDK detects the emulator and tries to show the message and then closes abruptly when it finds the hook.

msikyna commented 1 year ago

Hello @reyesmfabian,

currently, there is no way of setting the order of threat detection for freeRASP. The checks are performed asynchronously on Android, synchronously for iOS. If a check fails, the corresponding callback is executed.

However, in the BusinessRASP+, there is a way how to accomplish this. To see other differences between the freeRASP and businessRASP: https://github.com/orgs/talsec/discussions/5.

If you would like to follow up on the topic, just pick a time slot in Calendly.

Kind regards, Talsec team

NB: If you are killing an application based on callbacks, make sure that it is done appropriately (e.g. see the https://stackoverflow.com/questions/45109557/flutter-how-to-programmatically-exit-the-app)