Namuhla siphila nezinkulungwane zezinhlelo zokusebenza kumaselula ethu, kodwa bambalwa abantu abaziyo ngempela ukuthi bangazisebenzisa kanjani. Yini ngempela eyenziwa uhlelo lokusebenza ngalunye lwe-Android ngaphakathi?Isebenzisa ziphi izimvume, noma ikuthinta kanjani ukusebenza kwedivayisi kanye nokuphepha? Kwabathuthukisi, abahloli bezokuphepha, kanye namaqembu okumaketha, ukuqonda nokuhlaziya izinhlelo zokusebenza ze-Android akusadingeki: kuyisici esibalulekile sokudala imikhiqizo ethembekile, esheshayo, nephumelelayo. hlonipha ubumfihlo.
Kulesi sihloko uzothola umbono ophelele we Ukuhlaziywa kohlelo lokusebenza lwe-Android kusuka kuma-engeli amaningiAmathuluzi okuhlola ama-APK nezinhlelo zokusebenza ezifakiwe, izinsiza zokuthuthukisa ezifana ne-Android Studio APK Analyzer, izinhlaka zokuhlola ezifana ne-Inspeckage, izindlela zokuphepha ezifana ne-OWASP MAS, kanye nokubuka konke okuphelele kwamapulatifomu amakhulu okuhlaziya eselula (i-Firebase, i-Contentsquare, i-Mixpanel, i-Countly, i-Localytics, i-RevenueCat, i-AppDynamics, kanye ne-AppsFlyer). Konke kuchazwe ngesiSpanishi (eSpain), ngezwi elinobungane, kodwa ngaphandle kokulahla ubunzima bobuchwepheshe.
Kuyini ukuhlaziywa kohlelo lokusebenza lwe-Android futhi kusetshenziselwani?
Uma sikhuluma ngokuhlaziya izinhlelo zokusebenza ze-Android, singabhekisela kokubili hlaziya ngobuchwepheshe i-APK (izimvume, ikhodi, i-manifest, izinsizakalo, njll.) kanye nokufunda amamethrikhi okusetshenziswa, ukuziphatha komsebenzisi, ukusebenza, amaphutha, noma ngisho nokukhwabanisa kokukhangisa. Ziyizindawo ezimbili ezihlukile kodwa ezihambisanayo: uhlangothi lobuchwepheshe luqinisekisa ukuthi uhlelo lokusebenza luphephile futhi luqinile; uhlangothi lokuhlaziya umkhiqizo lukuvumela ukuthi uqonde ukuthi lolo hlelo lokusebenza luhlangabezana yini nezinhloso zalo zebhizinisi.
Ngokombono wobuchwepheshe, ukuhlaziywa kungahlukaniswa kube ukuhlaziywa okungaguquki kanye nokuhlaziywa okuguquguqukayoUkuqapha okuqinile kuhlola i-APK noma ikhodi ngaphandle kokuyisebenzisa (ukuhlukaniswa, ukuhlaziywa kwemvume, ukubuyekezwa kwe-AndroidManifest.xml, njll.). Ukuqapha okunamandla kuhlola ukuziphatha kohlelo lokusebenza ngenkathi lusebenza, kubhala ithrafikhi yenethiwekhi, izingcingo eziya kuma-API abucayi, ukusetshenziswa kwe-cryptography, noma ukudalwa kwamafayela.
Endaweni yolwazi lomsebenzisi kanye nokuhlaziywa kwebhizinisi, kugxilwe kakhulu Ukuqonda indlela abantu abasebenzisa ngayo uhlelo lokusebenza, ukuthi babhajwa kuphi, nokuthi kungani beluguqula noma belushiyaYilapho izinhlelo zokulandelela imicimbi, amamephu okushisa, ukuqoshwa kweseshini, amadeshibhodi emali engenayo, ama-funnel okuguqula, kanye namathuluzi okumaketha eselula asebenza khona.
Amathuluzi okuhlaziya ama-APK nezinhlelo zokusebenza ezifakiwe
Ukuze uqale ukuqonda ukuthi uhlelo lokusebenza lwe-Android lwenzani ngaphakathi, kunezinsiza ezikhethekile ezikuvumela ukuthi hlola ama-APK afakiwe noma amafayela e-.apk agciniwe kudivayisi. Lawa mathuluzi abonisa konke kusukela kudatha eyisisekelo (igama, inguqulo, usayizi) kuya emininingwaneni emincane kakhulu njengezimvume, izinsizakalo zangemuva, noma isiginesha yedijithali.
Enye yezinhlelo zokusebenza ezidumile kakhulu kule ndawo i-APK analyzer yomthombo ovulekile ezigqaja ngokuba uhlelo lokusebenza lokuhlaziya i-APK olulandwa kakhulu ku-Google PlayLeli thuluzi likuvumela ukuthi ukhiqize umbiko ophelele kakhulu wezinhlelo zokusebenza esezifakiwe kanye namafayela e-.apk angakafakwa, okuyinto enhle kakhulu yokuhlola uhlelo lokusebenza ngaphambi kokulinika ukufinyelela kudivayisi.
Umbiko ojwayelekile uhlanganisa ulwazi olufana nokuthi igama lohlelo lokusebenza, inguqulo, izinguqulo ezincane neziqondiwe ze-AndroidIzinsuku zokufaka nokubuyekeza, idatha yesitifiketi nokusayina, izimvume ezisetshenzisiwe (nencazelo), imisebenzi, izinsizakalo, abamukeli bokusakaza, kanye nabahlinzeki bokuqukethwe. Iphinde inikeze imininingwane ngezidingo zehadiwe (okuphoqelekile nokuzikhethela) futhi inikeza inguqulo ephelele yefayela le-AndroidManifest.xml kanye nenketho yokuligcina ngefomethi efundeka kalula.
Omunye umsebenzi obalulekile yikhono loku khipha i-APK yohlelo lokusebenza olufakiwe bese uyigcina endaweni yokugcina yedivayisi, kanye nokuthekelisa isithonjana. Lokhu kuyasiza ekuhloleni, ekudaleni amakhophi agciniwe, ekuhloleni ezindaweni ezihlukanisiwe, noma ekubukezeni inguqulo ethile ngaphambi kokubuyekeza.
Lolu hlobo lokuhlaziya luvame ukufaka izingxenye ezithile ze izimvume kanye nezibalo ezihlanganisiweNgakolunye uhlangothi, ikuvumela ukuthi ubhale zonke izimvume ezicelwe izinhlelo zokusebenza zedivayisi, ubone ukuthi yiziphi izinhlelo zokusebenza ezicela imvume ngayinye, ubuke incazelo kanye nezinga lokuvikelwa, futhi uthole kalula izinhlelo zokusebenza ezilambele amalungelo amaningi. Ngakolunye uhlangothi, inikeza izibalo eqoqweni lohlelo lokusebenza olufakiwe: ukusatshalaliswa kwezinguqulo ze-Android eziqondiwe, izinhlobo zesiginesha, inani elimaphakathi lemisebenzi noma izimvume ngohlelo lokusebenza ngalunye, njll.
Ithuluzi le-Android Studio APK Analyzer kanye ne-apkanalyzer
Kulabo abathuthukisa i-Android Studio, ipulatifomu ye-Google ifaka phakathi Isihlaziyi se-APK esinamandla esihlanganiswe endaweni yokuthuthukiswaLeli thuluzi lingavulwa ngokuhudula i-APK noma i-App Bundle uye efasiteleni lokuhlela, ngokuchofoza kabili i-APK kufolda yokwakha, noma kusuka kumenyu yokwakha ngaphansi kwenketho ethi "Hlaziya i-APK". Futhi inenguqulo yomugqa wemiyalo ebizwa ngokuthi i-apkanalyzer.
I-APK Analyzer ikuvumela ukuthi uhlole okuqukethwe kwefayela ngokulandelana, okufana ngaphakathi ne- Ifayela le-ZIP elinamafolda namafayela ahleliweInhlangano ngayinye (ifolda noma ifayela) ibonisa usayizi wayo wefayela ongahluziwe kanye nesilinganiso sosayizi wokulanda ocindezelwe njengoba ulethwe yi-Google Play, kanye nephesenti elimele usayizi ophelele. Lokhu kusiza ukukhomba ngokushesha ukuthi yiziphi izinsiza, imitapo yolwazi, noma amafayela e-DEX adla isikhala esiningi.
Iphuzu elilodwa elithakazelisayo kakhulu yindlela i-APK Analyzer esebenza ngayo Yakha kabusha i-AndroidManifest.xml yokugcinaKumaphrojekthi anezinhlobo eziningi zomkhiqizo noma amalabhulali ane-manifest yawo, wonke lawo mafayela ahlanganiswa abe ifayela elilodwa ngesikhathi sokuhlanganiswa. I-APK ihlala ifomethi ye-binary, kodwa i-parser iyiguqula ibe yi-XML efundekayo, ikhombisa ngqo i-manifest ezobonwa uhlelo kudivayisi futhi kwenze kube lula ukubona izinguquko ezethulwa yinqubo yokwakha.
Lo mbukeli we-manifesto uhlanganisa futhi amakhono e-lintLokhu kukuxwayisa ngamaphutha nezixwayiso, njengezinhlelo ze-XML ezingabonwa. Ezinye izexwayiso (isibonelo, lezo zezinhlelo ezingabhalisiwe) ziphephile ukuzishaya indiva futhi zingavinjelwa ngokungeza uhlelo ohlwini lokungazinaki kuzintandokazi ze-Android Studio.
Esinye isici esiyisisekelo se-APK Analyzer yisibukeli sefayela le-DEX, esihlinzeka izibali zamakilasi, amaphakheji, izindlela ezichaziwe nezibhekiselwe kuzoLokhu kuwusizo, phakathi kwezinye izinto, ekuhloleni ukuthi usondela yini ezindleleni ezingu-64K ngomkhawulo we-DEX, ukunquma ukuthi uzoyinika amandla yini i-multidex, noma ukuthi kudingeka yini kususwe ukuncika.
Isihlahla sekilasi sibonisa izindlela ezichazwe ku-DEX kanye nezindlela ezibhekiselwe kuzo (kufaka phakathi lezo ezivela emitatsheni yezinkampani zangaphandle kanye nama-API ajwayelekile e-Android ne-Java). Ithuluzi lihlukanisa phakathi kwalokhu okubili, lisiza ukuqonda ukuthi iyiphi ingxenye yesabelomali sendlela ebangelwa ikhodi yangokwezifiso nokuthi iyiphi ingxenye yokuxhomekeka.
Ukubuka kwe-DEX nakho kunezici izihlungi zokubonisa noma ukufihla izinkambu, izindlela, kanye nezindlela ezibhekiselwe kuzoUma wandisa ikilasi, ungakhetha ukuthi uzobuka izincazelo zendawo kuphela noma zonke izinkomba zangaphandle. Izinto eziboniswe kuma-italic zibonisa izinkomba ezingenayo incazelo kuleyo DEX; okungukuthi, izindlela noma amasimu ahlala kwamanye amafayela e-DEX noma ohlakeni.
Kumaphrojekthi asebenzisa i-obfuscation kanye nokunciphisa ikhodi nge-ProGuard noma i-R8, i-analyzer ivumela ukulayisha amafayela okumaka (mapping.txt), seeds.txt, kanye ne-use.txt okuvela esakhiweni esifanayo. Uma sekungenisiwe, imisebenzi eyengeziwe iyavulwa: ukususa amagama ukuze kubuyiselwe amakilasi nezindlela zokuqala, ukugqamisa ama-node angenakusulwa (imbewu), nokubonisa ama-node asuliwe ngesikhathi senqubo yokunciphisa.
Ibhokisi lokulayisha ifayela livame ukukhomba ngokuzenzakalelayo endleleni evamile (uhlelo lokusebenza/ukwakha/okukhiphayo/ukumapha/ukukhishwa/futhi kuseshwa amagama noma amagama aqondile aqukethe "imephu", "ukusetshenziswa", noma "imbewu" ephetha ngo-.txt. Ngalolu lwazi, i-analyzer ingabonisa izinto ezivikelwe ngokugqamile futhi idlule kulezo ezingasekho ku-DEX yokugcina.
Isibukeli se-DEX sihlanganisa nemenyu yokuqukethwe enemisebenzi enamandla kakhulu: Buka i-bytecode (smali), sesha ukusetshenziswa, bese udala imithetho yokulondolozwa kwe-ProGuard.Ngokukhetha ikilasi, indlela, noma insimu, ungavula ingxoxo enekhodi ekubonisweni kwe-smali, uqalise usesho lokuthi leso simboli sisetshenziswa kuphi kulo lonke i-DEX, noma udale ngokuzenzakalelayo umthetho wokugcina ukuze uvimbele ukuthi unganciphi ekwakhiweni kwesikhathi esizayo.
Ngale kwekhodi, i-APK Analyzer ikuvumela futhi ukuthi uhlole inguqulo yokugcina yezinsiza eziningi, njenge izithombe, izakhiwo, noma ifayela le-resources.arsc uqoboIsibonelo, ungabuka izintambo ezibekwe endaweni ngezilimi ezahlukene kanye nokucushwa, uhlole ukuthi iyiphi imithombo ebhale phansi ukuthi iyiphi kuhlobo oluthile, noma ubone okuqukethwe kwamafayela e-binary angavulwanga ngesandla.
Okokugcina, ithuluzi lifaka isici esiwusizo kakhulu sokubuyekeza izakhiwo: qhathanisa ama-APK amabili noma ama-App BundleUkulayisha inguqulo yamanje nokuyiqhathanisa ne-artifact eshicilelwe ngaphambilini kunikeza umbono womehluko wosayizi ngenhlangano ngayinye, okulungele ukuqonda ukuthi ukwanda kwesisindo phakathi kwezinguqulo kuvelaphi (izinsiza zesithombe ezintsha, imitapo yolwazi eyengeziwe, izinguquko zekhodi, njll.).
Ukusebenzisa ukuhlaziywa kweselula ukuqonda ulwazi lomsebenzisi
Ngaphandle kokuhlaziya ubuchwepheshe kuphela, kubalulekile ukuba namathuluzi azokwenza sivumele silinganise lokho abasebenzisi abakwenzayo ngaphakathi kohlelo lokusebenzaIndlela abasebenzisi abazulazula ngayo ezikrinini, lapho kwenzeka khona amaphutha, ukuthi yimiphi imikhankaso eletha ithrafikhi esezingeni eliphezulu nokuthi yimiphi engalethi ithrafikhi esezingeni eliphezulu. Isimo samapulatifomu okuhlaziya eselula sikhulu, ngakho-ke kubalulekile ukuchaza ngokucacile izidingo zebhizinisi lakho ngaphambi kokukhetha elilodwa.
Isihlungi sokuqala sihilela ukuzibuza ukuthi, ngaphezu kokuthola izilinganiso zokusetshenziswa nokusebenza, uyalidinga yini ithuluzi khuthaza ukubambisana phakathi kwamaqembu (umkhiqizo, ukumaketha, i-UX, ukuthuthukiswa, ukwesekwa) noma lokho okukuvumela ukuthi uhlaziye idatha yohlelo lokusebenza neyewebhu yeselula ngasikhathi sinye. Esinye isici esibalulekile ukuhlanganiswa nezinye izixazululo osuvele uzisebenzisa, njenge-CRM, amathuluzi okuzenzakalelayo okumaketha, noma amapulatifomu okuhlola.
Phakathi kwezixazululo ezisetshenziswa kakhulu ohlelweni lwe-Android, i-Firebase ivelele njenge ipulatifomu yokuthuthukiswa eguquguqukayo, ukusingatha kanye nokuhlaziya okuhlanganisiweI-Firebase ikuvumela ukuthi udale izinhlelo zokusebenza ze-Android, i-iOS, kanye newebhu ngokusebenzisa isizindalwazi sayo kanye nengqalasizinda yokuqinisekisa, ngenkathi futhi inikeza uhlelo oluqinile lokuhlaziya kanye nokubika ukwehluleka.
Endimeni yayo njengethuluzi lokuhlaziya, i-Firebase ivumela ukuqoqa idatha yobuningi ngokusetshenziswa, ithrafikhi, kanye nokusebenzisana, dala imicimbi ezenzakalelayo neyilungiselelwe wena (kufika kumakhulu amaningana), qapha ukuthi uhlelo lokusebenza luhluleka kuphi futhi kangaki, futhi usekele izinqumo zokumaketha noma zomkhiqizo ngedatha eqondile esikhundleni sokucabanga.
Enye ipulatifomu egxile kakhulu kumkhiqizo kanye nokuhlangenwe nakho kwedijithali yi-Contentsquare, ehamba phambili ngale kwezilinganiso zakudala kanye nezipesheli. imephu yohambo lwamakhasimende enemininingwane, amamephu okushisa, ukuphinda kweseshini, kanye nokuhlaziywa kwamaphuthaUmgomo wayo ukusiza ukuqonda hhayi nje kuphela ukuthi kwenzekani kuhlelo lokusebenza, kodwa futhi nokuthi kungani ukuziphatha okuthile kwenzeka: lapho abasebenzisi bebhajwa khona, yiziphi izindawo zesixhumi esibonakalayo abazinaki, noma ukuthi yiziphi izinto ezidala ukukhungatheka.
Amamojula afana ne-Journeys anikeza umbono womhlaba wonke we- uhambo oluphelele kusukela lapho umsebenzisi engena kuze kube yilapho ephuma Uhlelo lokusebenza noma isayithi leselula liyahlaziywa, kuhlonzwa imizila ebalulekile efanele ukulungiswa. Ama-heatmap abonisa izindawo ezichofozwe kakhulu noma ezinganakwa, i-Session Replay ibuyekeza izikhathi ngazinye ukuthola amaphethini (isibonelo, ukuchofoza intukuthelo okuphindaphindiwe ku-CTA efanayo), kanye ne-Product Analytics ihlaziya izibalo ezifana nokwamukelwa kwezici, izinga lokuguqulwa, ukutholwa, kanye nomzamo obonwayo.
I-Contentsquare ihlanganisa nemojuli Yokuhlaziya Amaphutha e- qoqa amaphutha obuchwepheshe nawokusebenza ngomthelelaukusiza ekubekeni phambili ukuthi yiziphi okufanele zilungiswe kuqala, kanye ne-Impact Quantification isebenza ukuhumusha lezo zinkinga zibe ukulahlekelwa ekuguqulweni, imali engenayo noma ukugcinwa, into ewusizo kakhulu lapho kuvunyelwa izinguquko kubabambiqhaza.
Ucwaningo oluthakazelisayo yilolu lweqembu, elisebenzisa lolu hlobo lokuhlaziya umkhiqizo, laqinisekisa ukusola kwalo ukuthi Isikrini esibonakalayo kumadivayisi eselula sasidida abasebenzisi.Lapho beqhathanisa idatha yewebhu neyeselula, babona ukuthi ukuguqulwa kweselula kuphansi ngokusobala, bahlola ulwazi lweselula ngokuningiliziwe, baklama kabusha ikhasi lesiginesha ngendlela yeselula yokuqala, futhi bakwazile ukuthuthukisa kakhulu ukuzivumelanisa namadivayisi ahlukene.
Ukuhlukaniswa kwabasebenzisi okuthuthukisiwe kanye nokuhlaziywa kokuziphatha
Ukuze ujule kakhulu ekuziphatheni komsebenzisi, amanye amapulatifomu akhethekile kakhulu ukuhlukaniswa kanye nokudalwa kweqembuI-Mixpanel ingenye yezibonelo ezaziwa kakhulu, eyenzelwe kokubili umkhiqizo kanye nokumaketha, futhi igxile ekuboniseni izindlela zokuguqula nokuhlaziya ukuthi amaqembu abasebenzisi ahlukene aziphatha kanjani.
Ku-Mixpanel, abasebenzisi bangahlukaniswa ngamaqembu ngokuya nge- izenzo ezenziwe noma izimfanelo ezabiweIsibonelo, abantu abaqale uhlelo lokukhokha ezinsukwini ezingu-30 ezedlule, abasebenzisi abazame isici esithile, noma amakhasimende athenge okungenani kabili. Amandla esistimu atholakala ezimpahleni zayo ezenziwe ngokwezifiso kanye ne-logic yokuhlukanisa, okuvumela ukudalwa kwezingxenye eziyinkimbinkimbi.
Izakhiwo ezenziwe ngokwezifiso zingahlanganiswa izimfanelo zemicimbi, abasebenzisi noma amaqembu ngezakhiwo ezintsha nezijwayelekile. Isibonelo, ukuhlanganisa imithombo ehlukene yezokuxhumana ye-UTM (i-Facebook, i-Instagram, i-Twitter) ngaphansi kwezakhiwo "Zomphakathi" ukuze kuhlaziywe ukuziphatha kwazo okuhlangene. I-logic yokuhlukanisa ikuvumela ukuthi udale izingxenye ezenze inhlanganisela ethile yezenzo, njengokuthenga kokubili umkhiqizo A nomkhiqizo B.
Elinye ithuluzi elivelele, kulokhu eligxile kakhulu kubumfihlo, yi-Countly, ikhambi lokuhlaziya leselula, lewebhu, kanye neledeskithophu elingasetshenziswa engqalasizinda yenkampani, okunikeza ukulawula okuphelele kwedathaLokhu kuyathakazelisa ikakhulukazi emikhakheni elawulwayo noma ezinkampanini ezinezidingo eziqinile zokuthobela imithetho.
I-County inikeza ukuphepha okuthuthukisiwe, ukufinyelela ngesikhathi sangempela kudatha ehlanganisiwe (amaphrofayili acebile, izilinganiso zokuzibandakanya ezingeni lomuntu ngamunye), kanye namamojula aqondiswe ku hlaziya ukwethembeka kwamakhasimende bese uthola ukuxhamazela"Isikhungo sayo Sokuthobela Imithetho" sikuvumela ukuthi uphathe ukuqoqwa kwedatha ngokwemvume, kanye nezicelo zokuthumela noma zokususa idatha, okuhambisana nemithethonqubo yokuvikela idatha.
Amapulatifomu okumaketha nokubhalisa anezibalo ezihlanganisiwe
Uma inhloso eyinhloko iwukumaketha ngeselula, kunezixazululo ezithile ezihlanganisa ukulinganisa, ukuhlukaniswa kanye nokwenziwa komkhankaso epulatifomu eyodwa. I-Localytics iyisibonelo esihle: ihlanganisa ukuhlaziywa kwezinhlelo zokusebenza namathuluzi okuthumela imiyalezo kanye nokwenza kube ngokwakho, okwenza kube kuhle kakhulu kumaqembu okumaketha adinga uhlelo oluhlangene.
I-Localytics inikeza imibiko yomkhankaso enemininingwane ongayibuka Yiziphi izenzo ezinomthelela omkhulu ekuguqulweni, ekugcinweni, ekubuyiselweni kwemali engenayo, ekukhuculweni kwentela, nasekukhishweni kwentela?Amakhono ayo okuhlaziya okubikezelayo asiza ekuboneni abasebenzisi abanethuba eliphezulu lokuguqula noma ukulahla, okuvumela ukuthumela imiyalezo eyenzelwe wena ngesikhathi esifanele.
Ipulatifomu ihlanganisa namamojula ahlakaniphile okwenza ngokwezifiso dala izingxenye ngokusekelwe kuphrofayela, ukuziphatha kanye nomlando futhi kusukela lapho, kwethulwa imikhankaso kanye nokuhlangenwe nakho okufanelana nomongo womsebenzisi, okuthuthukisa kakhulu ukubaluleka kwemilayezo.
Enkundleni yohlelo lokusebenza lokubhalisela, i-RevenueCat isibe ithuluzi elibalulekile lamaqembu amaningi. Nge-SDK elula ukuyihlanganisa, ivumela phatha okubhaliselwe kweselula, uqoqe izibalo eziqondiwe, futhi uhlole ngisho nama-paywall ngaphandle kokudala kabusha isondo kuyo yonke iphrojekthi.
I-RevenueCat inikeza ideshibhodi egxile kumamethrikhi okubhaliselwe: izivivinyo ezisebenzayo, ukuguqulwa kwesilingo, abasebenzisi abasebenzayo, imali engenayo, kanye ne-MRR. Iphinde inikeze amashadi angenziwa ngezifiso anezihlungi kanye nokuhlukaniswa ukubona, isibonelo, ukuthi imali engenayo ephindaphindayo isatshalaliswa kanjani yizwe noma ngohlobo lohlelo.
Elinye lamandla ayo ukuhlolwa kwe-A/B kwamanani kanye nezindonga zokukhokha, okuvumela Hlola inhlanganisela ehlukene yamanani, amaphakheji, kanye nokukhushulwa futhi ulinganise umthelela wohlobo ngalunye kuyo yonke i-funnel yokubhalisela, kusukela ekuvakasheni kokuqala kuya ku-paywall kuya ekugcinweni kwesikhathi eside.
Ukuze kubonakale izinhlelo zokusebenza eziyinkimbinkimbi, i-AppDynamics inikeza indlela yokuqapha egcwele, ehlanganisa konke kusukela kuma-microservices nemisebenzi engenamaseva kuya kuma-API omphakathi nawangasese, ngisho nezinhlelo zokusebenza zeselula ngokwazo. Umgomo wayo uwukuba thola ngokushesha izinkinga zokusebenza bese ukhomba imbangela eyinhlokokungakhathaliseki ukuthi kukhodi, kuncike ekuthembekeni, noma kusevisi yangaphandle.
I-AppDynamics ikuvumela ukuthi uhlanganise idatha evela kumadivayisi eselula, iziphequluli, kanye nabasebenzisi abangokwezifiso ku- Qhathanisa ulwazi phakathi kwezinguqulo ezahlukene zohlelo lokusebenza futhi ubone ukuthi i-UX ihlupheka kuphi. Iqukethe amawijethi alungele ukusetshenziswa ukwakha amadeshibhodi anemininingwane kanye nemojuli yokuqapha yokwenziwa elingisa ukugeleza komsebenzisi kanye nezingcingo ze-API, ithole amaphutha ngaphambi kokuba athinte abantu bangempela.
Okokugcina, i-AppsFlyer igxile ngqo emaqenjini okumaketha adinga ukulinganisa, ukuhlanganisa, nokuvikela imikhankaso yawo yeselula. Inikeza izixazululo ezisukela ekuhlaziyeni okuyisisekelo kuya kuzici ezithuthukisiwe, ngokugxila kakhulu... ukutholwa kokukhwabanisa kwezikhangiso (isibonelo, ama-bot akhiqiza ukuchofoza okungamanga).
Ngaphezu kokuvikela ukukhwabanisa, i-AppsFlyer ikuvumela ukuthi uchaze imicimbi yangaphakathi nohlelo lokusebenza eyenziwe ngokwezifiso ukuxhumanisa ama-KPI afana ne-ROI noma inani lempilo yonke nezenzo zomsebenzisi ezithile. Kuhlanganisa nokuhlolwa kokukhuphuka ukuze kulinganiswe ukuthi zingaki izinguquko ebeziyofezwa ngaphandle kwemikhankaso ekhokhelwayo futhi ngaleyo ndlela kulinganiswe umthelela wangempela wokutshalwa kwezimali kokukhangisa.
Njengokwengeza kukho konke lokhu kuhlaziywa kwenani, kufanelekile ukucabangela amathuluzi anjenge-AppFollow, agxile ku- Gada izilinganiso kanye nokubuyekezwa ku-App Store kanye ne-Google PlayNgenxa yokuhlaziywa kwemizwa, kungenzeka ukubona ukuvela kwethoni yokubuyekezwa nokuqhathanisa izikhathi, ukuthola izinkomba ezicacile mayelana nendlela abasebenzisi ababona ngayo ikhwalithi kanye nolwazi lohlelo lokusebenza.
Ukuhlolwa kwezokuphepha kanye nokuhlaziywa okuthuthukisiwe nge-Inspeckage
Uma umgomo ungekhona ukumaketha noma umkhiqizo, kodwa hlola ukuphepha, hlaziya i-malware, noma ubuyekeze ukuziphatha kwangaphakathi kohlelo lokusebenzaKusetshenziswa izinhlaka ezithile kakhulu. Enye yezinto ezithakazelisa kakhulu ohlelweni lwe-Android yi-Inspeckage (i-Android Package Inspector), esebenza njengemodyuli ye-Xposed.
I-Inspeckage isetha iseva kudivayisi ye-Android uqobo, efinyeleleka nge-adb kusuka kukhompyutha, futhi ikuvumela ukuthi ubone imicimbi yesikhathi sangempela eyenzeka kudivayisi ngenkathi uhlelo lokusebenza lusebenzaNgokungafani nezinye izindawo zokuhlaziya ezifana ne-MobSF noma i-AppMon, inzuzo yayo enkulu ukuthi ikuvumela ukuthi ubuke imicimbi ngaphandle kokumisa ukuhlaziya okuguquguqukayo futhi ulungiselele kalula ama-hook ezindleleni ezithile.
Ikhodi yaleli thuluzi iyatholakala ku-GitHub futhi ingatholakala njenge-APK kusuka ku-Play Store noma endaweni yokugcina i-Xposed. Uma imodyuli isifakiwe, ivulwa ku-Xposed futhi ingabonakala ku-interface eyinhloko. isimo seseva, isikhombikubona senethiwekhi, imbobo, kanye nomyalo we-adb kuyadingeka ukuze uxhumeke kusuka emshinini wendawo.
Uhlelo lokusebenza lubonisa uhlu lwezinhlelo zokusebenza kudivayisi, kanye nenketho yokukhetha izinhlelo zokusebenza zomsebenzisi kuphela noma ukufaka nezinhlelo zokusebenza zesistimu. Lokhu kuyatholakala kumenyu eseceleni. Lungiselela isikhombimsebenzisi kanye ne-port, vumela ukuqinisekiswa ngegama lomsebenzisi nephasiwedi futhi ulungise amanye amapharamitha eseva.
Ngemva kokukhetha nokuqalisa uhlelo lokusebenza, ukuhlaziywa okuguquguqukayo kuyaqala. Ikhasi lewebhu eliphethwe yidivayisi lifinyelelwa kusuka kusiphequluli sekhompyutha, lapho kuboniswa khona imenyu enezinkinobho ze-[unclear - possibly "opportunities" noma "functions". Landa i-APK noma idatha kusuka kwisitoreji sangaphakathi, thatha izithombe-skrini, sebenzisa ukucushwa okuhlukile (njengokukhubaza i-FLAG_SECURE, ukuqala kabusha uhlelo lokusebenza, ukukhetha i-proxy, noma ukukhetha ukuthi yiziphi izinhlobo zemicimbi okufanele uzirekhode) bese uvuselela imiphumela ngesikhathi sangempela.
I-Inspeckage iphinde inikeze izinqamuleli zokuvula ithebhu nge-LogCat, hlola ukuthi uhlelo lokusebenza noma imodyuli iyasebenza yini, kanye nokufihla noma ukubonisa amaphaneli emininingwane. Iphaneli yolwazi lohlelo lokusebenza iyabonisa igama lephakheji, i-UID, i-GUID, isimo sesipele kanye nokufinyelela kohlobo lwe-TreeView kwisitoreji sangaphakathi, lapho amafayela angalandwa khona ngokuchofoza okukodwa.
Umzimba oyinhloko wombiko uhlelwe ngamathebhu ahlukene: elilodwa eline- imisebenzi, izimvume, izinsizakalo, abahlinzeki bokuqukethwe, abamukeli bokusakaza, kanye nemitapo yolwazi eyabiwe, ngezinketho zokuqalisa imisebenzi noma ukubonisana nabahlinzeki; enye enikezelwe ku-SharedPreferences, engabukwa kokubili ngefomethi yelogi (ukuqonda izinguquko eziguquguqukayo ngokuhamba kwesikhathi) kanye nesimo samanje sefayela.
Isici esisodwa esinamandla kakhulu ukuqoshwa kwazo zonke umsebenzi we-cryptographic wohlelo lokusebenzaLesi sigaba sibonisa ama-algorithm, okhiye, kanye nolwazi olubethelwe olusetshenzisiwe. Ithebhu ethi "Hash" iqukethe wonke amanani okusetshenziswa kuwo imisebenzi ye-hash kanye nohlobo lomsebenzi osetshenziswa esimweni ngasinye.
Ingxenye ethi "Isistimu Yefayela" ibala wonke amafayela uhlelo lokusebenza olusebenzisane nawo, okuwusizo ekutholeni ukuthi ludala amafayela asolisayo noma lulanda izinhlelo zokusebenza emithonjeni engekho emthethweni. Ithebhu ethi "IPC" ibonisa imizamo yokuxhumana phakathi kwezinqubo kusetshenziswa izinhloso.
Ithebhu ethi “Ama-Hook” ihlanganisa umsebenzi wazo zonke izindlela lapho ama-hook enziwe ngokwezifiso ahlelwe khona. Ukuwadala kulula kakhulu ngenxa yesibonisi esibonakalayo lapho ungakwazi khona Khombisa indlela yokuvimba kanye nohlobo lwe-hookAma-hook angachazwa aguqula amapharamitha okufaka indlela noma inani lokubuyisa, avule umnyango wezimo eziningi zokuhlola.
Imisebenzi eyengeziwe ingatholakala kumenyu eseceleni. lawula amanani okufaka izigxivizo zeminwe zedivayisi noma izixhumanisi ze-GPSLokhu kusiza ukugwema izindlela zokuthola i-emulator noma ukukhwabanisa indawo. Ngaphezu kwalokhu okungenhla, i-Inspeckage ingabhala imibuzo yedathabheyisi, ithrafikhi yenethiwekhi, ama-WebView, kanye nezinye izinsiza ezifinyelelwa ngabahlinzeki bokuqukethwe.
Ngenxa yalolu hlu olubanzi lwamakhono, i-Inspeckage ibhekwa njenge- Ithuluzi eliphelele kakhulu lokunciphisa izikhathi zokuhlaziywa kwesampula, ikakhulukazi kulabo abaqala ukuhlaziywa kwe-malware yeselula noma ukuhlolwa kokuphepha kohlelo lokusebenza lwe-Android.
Izindlela zokuphepha, izinsongo, kanye nelabhorethri yokuhlola
Isimo samanje, lapho izigidigidi zamadivayisi nezinhlelo zokusebenza ze-Android ezisebenzayo ziphatha idatha ebucayi (ibhange, ezempilo, imfundo, njll.), kwenza kube yimfuneko ukuthatha ukuphepha kuyo yonke impilo yohlelo lokusebenzaAkukhona nje ukugwema amaphutha asobala, kodwa mayelana nokuhambisana nemithetho efana ne-GDPR noma amazinga emboni njenge-PCI DSS lapho kucutshungulwa izinkokhelo.
Izinhlelo zokusebenza ze-Android zivezwa ezinsongweni eziningi, eziningi zazo ezixazululwa kumaphrojekthi afana nalawa I-OWASP Iselula Ehamba phambili engu-10Phakathi kwezinkinga ezibaluleke kakhulu, singaqokomisa ukusetshenziswa okungalungile kwepulatifomu (ukwehluleka ukusizakala ngezindlela zokuphepha zasendaweni, izimvume eziphethwe kabi, ukusetshenziswa kabi kwama-API adaluliwe), isitoreji sedatha esingavikelekile (izizindalwazi ezingabethelwe, amalogi anolwazi olubucayi, amakhukhi avikelwe kabi), noma ukuxhumana okungavikelekile (ukusetshenziswa kwezinqubo eziphelelwe yisikhathi noma ithrafikhi engabethelwe).
Izinkinga nge ukuqinisekiswa okungekuhle kanye nokuphathwa kweseshini (amaphasiwedi abuthakathaka, izikhathi ezingaphelelwa yisikhathi, amathokheni angavikelwe kahle), ukubethela okunganele okuvumela ukufinyelela idatha ngabahlaseli abangokoqobo noma i-malware, kanye nokwehluleka kokugunyazwa okuvula umnyango wokwanda kwamalungelo ngokuhlasela okuzenzakalelayo.
Ngasohlangothini lokuthuthukiswa, ikhwalithi yekhodi yohlangothi lweklayenti ibalulekile: imikhuba emibi, ukuntuleka kokulawula amaphutha, noma imisebenzi yokuphepha engasetshenziswanga kahle Lokhu kungaholela ekugcwaleni kwe-buffer kanye nezinye izinkinga. Okungeziwe kulokhu ingozi yokuguqulwa kwekhodi (ama-patches amabili anonya, izinsiza ezishintshiwe, njll.). izinhlelo zokusebenza mbumbulu ezizenza ezisemthethweni), ubunjiniyela obuphambene be-APK kanye nokuba khona kwemisebenzi "efihliwe" noma yokulungisa amaphutha engakhutshazwanga ekukhiqizweni.
Ukuze kuxazululwe lezi zinsongo, iphrojekthi ye-OWASP Mobile Application Security (MAS) iphakamisa indlela kanye nohlu lokuhlola lwezidingo zokuphepha ezihlanganisa izizinda eziningana: ukwakheka okuphephile kanye nokuklama, ubumfihlo kanye nokugcinwa kwedatha, i-cryptography efanele, ukuqinisekiswa kanye nokuphathwa kweseshini, ukuxhumana kwenethiwekhi okuphephile, ukusebenzisana kwepulatifomu, ikhwalithi yekhodi kanye nokucushwa kokwakhiwa, kanye nezindlela zokuqina kohlangothi lweklayenti.
Ukuhlolwa kwalezi zidingo kuvame ukuhlanganisa ukuhlaziywa okungaguquki kanye nokuguquguquka. Engxenyeni engaguquki, izinto zobuciko ezifana ikhodi yomthombo, ikhodi ehlukanisiwe, ama-binary namafayela ahlobene Ngaphandle kokusebenzisa uhlelo lokusebenza, ubuthakathaka obungaba khona bungatholakala kusukela ku-metadata, izingcingo zomsebenzi, kanye nokugeleza kohlelo. Amathuluzi afana ne-Mara (uhlaka lokuhlaziya oluvumela ukuhlukaniswa nokuhlukaniswa kwama-APK, ukususwa kwe-fuzz, ukuhlaziywa kwezintambo, ukukhishwa kwemvume, njll.), i-APK Analyzer uqobo, kanye nezixazululo ezifana ne-JAADAS zokuhlaziywa kwe-IPC okungaguquki ziwusizo kakhulu kulesi sigaba.
Ngakolunye uhlangothi, ekuhlaziyeni okuguquguqukayo, uhlelo lokusebenza lusebenza endaweni elawulwayo futhi ukuziphatha kwalo kubonwa ngaphansi kwezimo ezahlukene. Yilapho amathuluzi anjenge I-Drozer, esebenzisana nomshini we-Dalvik virtual, ama-endpoint e-IPC, kanye nesistimu yokusebenza ukuthola ubuthakathaka; i-Burp Suite, esebenza njengommeleli wewebhu ukuze ibambe futhi ilawule ithrafikhi phakathi kohlelo lokusebenza neseva; kanye ne-Inspeckage, eyenzelwe ukusebenzisa nokubuka uhlelo lokusebenza ngesikhathi sangempela kusetshenziswa ama-hook ku-Android API.
Kukhona futhi nezinhlaka ezihlanganisiwe njenge-Mobile Security Framework (MobSF), ezihlanganisa ukuhlaziywa okungaguquki kanye nokuguquguquka futhi zisize ekwenzeni ukuhlela ukuhlolwa okuphelele kusuka kuthuluzi elilodwa. Kulabo abafuna ukuzijwayeza, indlela ephumelela kakhulu yokufunda ukusebenza ngezinhlelo zokusebenza ezisengozini ngamabomu.
Phakathi kwalezi zinhlelo zokusebenza zokuzijwayeza kukhona amaphrojekthi afana ne-InsecureShop (isitolo esiku-inthanethi esisengozini esinamaphutha acishe abe ngamashumi amabili angasetshenziswa, iningi lawo lingenasidingo se-root), i-AndroGoat (uhlelo lokusebenza lokuqala olusengozini olwakhiwe eKotlin, olunobuthakathaka obuhlukahlukene obuhlukahlukene), i-InsecureBank V2 (uhlelo lokusebenza lwasebhange olune-backend ye-Python, oluklanyelwe ubuthakathaka obuningi) kanye ne-Crackmes evela kuphrojekthi ye-MAS uqobo, ehlelwe ngamazinga amaningana obunzima bohlobo lwe-CTF.
Ngamafuphi, ukuhlaziywa kohlelo lokusebenza lwe-Android kuhilela okungaphezu nje kokubheka izimvume noma ukubala okulandwayo. Kuhilela ukuhlanganisa Amathuluzi okuhlola i-APK, izindawo zokuhlaziya eziguquguqukayo, izindlela zokuphepha, kanye namapulatifomu okuhlaziya umkhiqizo nokumakethaUma zonke lezi zingcezu zihlanganiswa nomjikelezo wokuphila kohlelo lokusebenza, umphumela uba izinhlelo zokusebenza eziphephile nezisebenza kahle ezihambisana nezidingo zangempela zabasebenzisi kanye nebhizinisi.
