Sputnik Improved its Detection Rate for Malicious Reviews by 14% after Integrating the SysIntegrity Function - Huawei Developers

Overview
International News Agency and Radio Sputnik is a news agency with international reputation. Its news app Sputnik offers high-quality, international news stories covering breaking news, major events, in-depth reports, online video ads, and exclusive interviews. After Sputnik integrated the SysIntegrity function, it improved its detection rate for malicious reviews by 14%.
Challenges
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Dmitry Priemov, head of mobile from Sputnik, said, "We have found malicious attacks on Sputnik's ads. So we started to block users of the app with changed signature, because it definitely means that APK was modified to remove the ads." He added, "We also needed to quickly determine whether the malicious reviews of our app have been posted from devices with a changed signature."
Solution
"We regard system integrity as an important part of evaluating device risks." said Dmitry Priemov. HUAWEI Safety Detect is a multi-dimensional open security detection service. Its SysIntegrity function helps app developers quickly build security capabilities which protect user privacy and app security. "By integrating SysIntegrity, we have clear understanding whether the app is running on rooted device." Dmitry Priemov said.
SysIntegrity works using the Trusted Execution Environment (TEE) and digital signing certificate. It helps Sputnik check whether the device running the app is secure, and detects security risks such as if the device has been rooted. If risks are detected, the app can restrict that device from using certain functions, which prevents the malicious cracking of in-app ads. In addition, with SysIntegrity, the app can skip malicious reviews from some users, just as Dmitry Priemov said, "Our support team just skips any claims from such users or replies them that they have to format their devices and reinstall the app from official store."
Dmitry Priemov said, "Since integrating SysIntegrity, Sputnik has improved its detection rate for malicious reviews by 14%."
Result
Sputnik has improved its detection rate for malicious reviews by 14%.
You can find out more on the following pages:
Huawei developers official page:
SysIntegrity API intro:
Experience the easy-integration process on Codelabs
Rediit: https://www.reddit.com/r/HuaweiDevelopers/
Github: https://github.com/HMS-Core/hms-safetydetect-demo-android
Stack Overflow: https://stackoverflow.com/questions/tagged/huawei-mobile-services?tab=Newest

Related

HUAWEI Account Kit Helps Games Share Digital Assets from Device-to-Device with Unmatched Ease

Imagine that one of the players for your game has spent a lot of time and effort becoming an advanced player, but is then unable to use his/her props, level, or points in the game on a new device, simply because they are not signed in to their account. The user would need to start from scratch, which could be so frustrating that they'd opt to uninstall the game. Account Kit can help you avoid this nightmare scenario, by enabling your game to share its digital assets across devices.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Gameloft, an acclaimed and award-winning game publisher, has chosen to integrate Account Kit. Now Gameloft game apps allow for sign-in via one-click authorization on new devices, after which digital assets owned by the user, and linked to the user's HUAWEI ID, can be accessed on the new device. This has substantially enhanced user experience and user loyalty, by integrating Account Kit and other services like In-App Purchases, the game apps not only bring high-quality gaming experience to AppGallery users, but also see a great increase of their own downloads.
In addition, Account Kit incorporates two-factor authentication and facial or fingerprint sign-in technologies, and complies with international standards such as OAuth 2.0 and OpenID Connect, to keep user data and privacy under lock-and-key. A lot of financial apps from around the globe have integrated with Account Kit after their rigorous internal evaluation and have released the new version, due to the kit's formidable security and privacy protection capabilities.
More than 900 million users in 190+ countries and regions use HUAWEI IDs, a massive, global user base that can expand the reach and audience for your app to unexpected new heights. Account Kit will continue to upgrade to serve as an intuitive and accessible method of entry to your apps, helping you attract and retain users with unprecedented success.
For more information, please visit:
Account Kit Development Guide:
https://developer.huawei.com/consum.../introduction-0000001050048870?ha_source=hms1
Account Kit Codelab:
https://developer.huawei.com/consumer/en/codelab/HMSAccounts/index.html#0?ha_source=hms1

Daily Clean Master Improved Its Identification Rate of Fake Users from Simulators by 15% After Integrating the SynsIntegrity Function

Overview
Daily Clean Master is a cleaning app. It quickly rids user's devices of unneeded cached data, junk documents, and residual app files, thereby boosting response times and battery life, and making space for more important data. Now that Daily Clean Master has integrated SynsIntegrity, it has improved its identification rate of fake users created by simulators by 15%, and block fake users with its anti-cheat system effectively.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Challenges
Most apps need to advertise to acquire users, but if an advertising channel yields mainly fake users, its conversion rate will be very low. Daily Clean Master wanted to identify which of the users acquired through their ads were fake.
"If we can determine the proportion of fake users before settling bills with advertisers, we can greatly reduce waste from our marketing budget." said the technical director of Daily Clean Master. "We have already built a mature digital operations framework to improve our user conversion rate and overall efficiency, but in terms of analyzing device information, such as which devices are real, which are simulators, and which are rooted or unlocked devices, we need to take use of identification strengths of the device vendors."
Solutions
By integrating HUAWEI Safety Detect, Daily Clean Master has greatly enhanced its digital operations. The service provides functions such as SynsIntegrity, which plays an important role in identifying fake users. It works by checking the system integrity of users acquired through ads when they are downloading the app and registering an account. During this process, it determines whether the user's device is secure, for example, whether it is rooted, unlocked, or a simulator.
If fake users from simulators are identified, the app's operations team can block them, or ask the advertiser to enhance advertising, reducing waste of the marketing budget. The app can also prevent a user from proceeding if it identifies any security risks on the user's device, for example, the device has been rooted or unlocked, preventing possible risks to the app and improving the app's security.
Safety Detect has helped Daily Clean Master to refine its promotional campaigns and operations. "Safety Detect's SysIntegrity function helps us analyze the proportion of fake users we are getting, so we can systematically monitor our marketing activities at each stage of the journey." said the technical director of Daily Clean Master. "According to our analysis, SysIntegrity helps our app improve the identification rate of fake users from simulators by 15%." the director added.
Result
The app improved the identification rate of fake users from simulators by 15%.
More details like this, https://forums.developer.huawei.com/forumPortal/en/forum/hms-core
Nice boost.
Wdym by fake users?

DStv Now Integrated the System Integrity Check and App Security Check Functions, Helping Improve Video Smoothness

Overview
DStv Now is a popular entertainment app owned by Multichoice in Africa. It enables users to watch their favorite video content online or through offline caching. Because the app's developer is committed to providing secure and reliable digital video content to users, they integrated two HUAWEI Safety Detect functions: system integrity check (SysIntegrity) and app security check (AppsCheck). This helped DStv Now to improve video smoothness.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Challenges
Ensuring the security of an app's running environment is critical to both providing a risk-free user experience and protecting video content. Malicious apps on user devices pose security threats to user accounts and personal information. Knowing this, DStv Now's developer decided that integrating security check capabilities was vital to evaluating the security of devices' environments.
DStv's Technical Director said: "We continuously optimize our app to adapt to different devices. However, we still need to ensure that our app runs on certified devices, to comply with the requirements of some content providers, and offers users a smooth streaming experience."
Solution
Safety Detect is a multi-dimensional open security detection service offered by Huawei. It provides a range of functions, such as SysIntegrity and AppsCheck, to help apps quickly build security capabilities which protect user privacy and security. DStv's Technical Director said, "Safety Detect helps us check whether a device is certified and ensure that the device has not been tampered with." DStv Now calls SysIntegrity and AppsCheck whenever a user registers an account, watches a video online, or caches a video in the app.
SysIntegrity, which is based on a Trusted Execution Environment (TEE) and digital certificate signature, helps DStv Now check whether the device running the app is secure, for example, whether the device has been rooted. AppsCheck helps DStv Now obtain a list of malicious apps on devices on which it has been installed. If risks are detected during this process, DStv Now can determine whether to restrict the app's functionality, or provide a warning to the user. "Using Safety Detect has helped us improve app security and ensure that users only use our app on certified devices", said the Technical Director of DStv Now. "This helps us root out piracy and ensure that streaming and video playback are done on devices certified by our content providers." The director went on to say, "It also helps us deliver a smooth user experience as we can develop our features based on certified devices, without worrying that our app is catering to tampered devices."
HUAWEI Safety Detect meets DStv Now's security check requirements and enables the app to provide more secure and reliable video content. The technical director said, "After integrating the SysIntegrity and AppsCheck functions, the video smoothness is assured."
Results
Video smoothness is assured.
User accounts are more secure.
Video playback is more secure.

How to Secure Mobile Wallet Account? iCard Integrates the SysIntegrity API to Prevent Risks from Login Step

Overview
iCard is a popular mobile wallet app in Bulgaria. Backed by over 12 years of industry experience and a large user base, iCard provides services such as bank card management, collection and payment, international transfers, and foreign currency exchange for more than 30 countries and regions in Europe. How to ensure user account and transaction security and prevent itself from being attacked on risky devices have always been the key challenges of iCard.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Challenges
Risky devices undoubtedly affect app systems and users alike. Martin Dimitrov, head of mobile development team in iCard, said, "Jailbreak and root processes essentially alter the operating system and its security level. The more change that the operating system tolerates, the greater the likelihood that a legitimate app will be vulnerable after a device is jailbroken or rooted."
If a user is unaware that their device has been tampered with and signs in to and uses an app on the device, their account and personal data may be at risk and it can be difficult to check the system integrity of devices. iCard needs to integrate a powerful detection capability to check whether the device running the app is risky.
Solution – integrating SysIntegrity API
Fortunately, by integrating the SysIntegrity API of HUAWEI HMS Core Safety Detect Kit, iCard can quickly check whether the device is secure or rooted during user sign-in. SysIntegrity is free for developers to use and works using the Trusted Execution Environment (TEE), and helps app developers build security capabilities to protect user privacy and app security through tamper-proof and reliable check results.
Risk prevention, starting from App login
Martin Dimitrov said, "With SysIntegrity integrated, our app can detect risks once a user signs in to it on a rooted device, and it will then show a security warning to notify the user of possible risks, such as financial losses and information leaks." Furthermore, it only takes 1 person-day to integrate SysIntegrity.
(iCard app displays a message indicating that the phone is risky.)
Martin Dimitrov added, "After integrating SysIntegrity, the instances of risky sign-in on rooted phones have been reduced by around 10% which is a really good number. And we can also make the development process more convenient and efficient."
Results
The instances of risky sign-in on rooted devices reduced by about 10%.
User accounts and transactions are now well safeguarded.
Find out more on:
Huawei developers official page
Experience the easy-integration process on Codelabs
Submit a trouble ticket online for any problems during integration
Rediit: https://www.reddit.com/r/HuaweiDevelopers/
Github: https://github.com/HMS-Core/hms-safetydetect-demo-android
Stack Overflow: https://stackoverflow.com/questions/tagged/huawei-mobile-services?tab=Newest
Very interesting Security.

APUS Browser Improved Its Block Rate of Risky URLs by 20% When It Integrated the URLCheck Function

Overview
APUS browser is an easy-to-use, intelligent app with a wide range of features. It enables users to quickly access websites, download videos, browse news, and much more. After the development team integrates the URLCheck (malicious URL check) function of HUAWEI Safety Detect into this app, APUS browser can identify malicious URLs and send reminders to users to prevent them from accessing malicious URLs, helping them avoid phishing, account theft, and even Trojan infection.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Challenges
When browsing the web, users' personal privacy information and property is at risk. Malicious URLs, such as phishing and fake website links, can tamper with devices and trick users into revealing their account information or transferring money. APUS browser's development team knew their app needed to be able to detect malicious URLs, so it could prevent users from inadvertently accessing risky websites.
"Apart from the intelligent browsing function, we are always prioritizing user privacy and security when users are browsing." said Xu Zhang, the APUS Browser's Tech Expert. "We need a detection method that is both easy-to-use and cost-effective, so we can provide a secure browsing experience for our users."
Solution
"The HUAWEI Safety Detect's URLCheck function meets every one of our requirements. It helps us quickly evaluate whether there are any risks in URLs", said Xu Zhang. With URLCheck, apps can confirm whether a URL is secure or malicious. Now that it has integrated URLCheck, APUS browser can quickly evaluate the risk type of the URL the user is attempting to access. "If our app finds a risk in the URL, we can notify users of the risk, then block the URL", Xu Zhang added.
"Since we integrated URLCheck, we've been able to improve the block rate for risky URLs by 20%", said Xu Zhang. "This function is easy to integrate and we don't need to operate it, so we can control the cost of implementing a secure browsing service."
After integrating the URLCheck function, APUS browser has gained the malicious URL detection capability, enabling the app to provide a fast and secure browsing experience for users.
Result
The block rate for risky URLs has been improved by 20%.
Demo
More details like this, you can check https://forums.developer.huawei.com/forumPortal/en/forum/hms-core

Categories

Resources