Security Glossary

Emulator detection is a mobile security control that identifies whether an application is running on a virtual/emulated environment rather than real physical hardware. Attackers use emulators to bypass security controls, analyse applications, and automate attacks. By detecting emulators, mobile applications trigger security measures and may restrict functionality or block access to the app. Emulator detection is important to identify threats like reverse engineering, API abuse, etc. It helps in preventing app tampering and helps in overall data security. In mobile app security, it is an important control of RASP solutions. A common emulator detection technique involves:

• Checking build properties for emulator-specific values.
• Check for the absence of standard physical sensors.
• Detecting files specific to emulator software.
• CPU architecture checks.
• Telephony/SIM checks.
• Timing inconsistencies.

Encryption is the process of turning readable data (plaintext) into an encoded format (ciphertext) so that only authorised parties can decode and read it. Apps and websites use encryption methods like AES, RSA, and TLS to protect data as it's sent over the internet (e.g., HTTPS using SSL/TLS) and while it's stored on devices or servers. This can only be decrypted with the original decryption key. Strong encryption depends not just on reliable algorithms, but also on proper key management. In real-world use, organisations encrypt sensitive customer data and communications to prevent hacking, spying, or data theft. Encrypted information is useless to an attacker without the correct key.