Talsec Update

CHANGELOG.md

@@ -0,0 +1,20 @@
+# Change Log
+All notable changes to this project will be documented in this file.
+
+## [3.0.0] - 2021-10-25
+This version improves granularity of detected threat types.
+
+### Added
+- added new threat callback **'onUntrustedInstallationSourceDetected'**, which was previously part of onTamperDetected callback
+
+### Changed
+- changed threat callback from **'onFingerprintDetected'** to more understandable **'onDeviceBindingDetected'**
+- increased min SDK version from 19 to 21
+- increased target/compile SDK version from 29 to 31
+- increased Kotlin and Gradle versions
+
+### Fixed
+- support for direct ADB side-loading (check *TalsecApplication.kt -> supportedAlternativeStores*)
+- fixed a bug in a native method which caused crash on a one specific device
+- fixed a false positive detection of an emulator (TECNO CD7)
+- fixed a bug with a negative timeMs during run time check computation (fixes a logging)

FreeRASPDemoApp/app/build.gradle

@@ -4,13 +4,13 @@ plugins {
 }
 
 android {
-    compileSdkVersion 29
-    buildToolsVersion "29.0.3"
+    compileSdkVersion 31
+    buildToolsVersion "30.0.3"
 
     defaultConfig {
         applicationId "com.aheaditec.talsec.demoapp"
-        minSdkVersion 19
-        targetSdkVersion 29
+        minSdkVersion 21
+        targetSdkVersion 31
         versionCode 1
         versionName "1.0"
 
@@ -34,9 +34,9 @@ android {
 
 dependencies {
     // Talsec Release
-    releaseImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:2.6.0-release'
+    releaseImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:3.0.0-release'
     // Talsec Debug
-    debugImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:2.6.0-dev'
+    debugImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:3.0.0-dev'
 
     implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
     implementation 'androidx.core:core-ktx:1.5.0'

FreeRASPDemoApp/app/src/main/java/com/aheaditec/talsec/demoapp/TalsecApplication.kt

@@ -44,12 +44,17 @@ class TalsecApplication : Application(), ThreatListener.ThreatDetected {
         TODO("Not yet implemented")
     }
 
+    override fun onUntrustedInstallationSourceDetected() {
+        // Set your reaction
+        TODO("Not yet implemented")
+    }
+
     override fun onHookDetected() {
         // Set your reaction
         TODO("Not yet implemented")
     }
 
-    override fun onFingerprintDetected() {
+    override fun onDeviceBindingDetected() {
         // Set your reaction
         TODO("Not yet implemented")
     }
@@ -61,7 +66,8 @@ class TalsecApplication : Application(), ThreatListener.ThreatDetected {
         private const val watcherMail = "john@example.com" // for Alerts and Reports
         private val supportedAlternativeStores = arrayOf(
             // Google Play Store and Huawei AppGallery are supported out of the box, you can pass empty array or null or add other stores like the Samsung's one:
-            "com.sec.android.app.samsungapps" // Samsung Store
+            "com.sec.android.app.samsungapps", // Samsung Store
+            "adb" // Installation using ADB
         )
     }
 }

FreeRASPDemoApp/build.gradle

@@ -1,12 +1,12 @@
 // Top-level build file where you can add configuration options common to all sub-projects/modules.
 buildscript {
-    ext.kotlin_version = "1.4.32"
+    ext.kotlin_version = "1.5.20"
     repositories {
         google()
-        jcenter()
+        mavenCentral()
     }
     dependencies {
-        classpath "com.android.tools.build:gradle:4.1.3"
+        classpath "com.android.tools.build:gradle:7.0.3"
         classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$kotlin_version"
 
         // NOTE: Do not place your application dependencies here; they belong

FreeRASPDemoApp/gradle/wrapper/gradle-wrapper.properties

@@ -3,4 +3,4 @@ distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-6.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-7.0.2-bin.zip

README.md

@@ -32,9 +32,9 @@ Set release and debug dependencies in your :app module's `build.gradle`:
 
 dependencies {
     // Talsec Release
-    releaseImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:2.6.0-release'
+    releaseImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:3.0.0-release'
     // Talsec Debug
-    debugImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:2.6.0-dev'
+    debugImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:3.0.0-dev'
     ...
 ```
 
@@ -150,12 +150,17 @@ override fun onTamperDetected() {
     TODO("Not yet implemented")
 }
 
+override fun onUntrustedInstallationSourceDetected() {
+    // Set your reaction
+    TODO("Not yet implemented")
+}
+
 override fun onHookDetected() {
     // Set your reaction
     TODO("Not yet implemented")
 }
 
-override fun onFingerprintDetected() {
+override fun onDeviceBindingDetected() {
     // Set your reaction
     TODO("Not yet implemented")
 }