Android App Security 3.2.0.0
Dear customer,
DoveRunner Android AppSecurity v3.2.0.0 is now available. This update adds React Native support, partial Dex encryption, partial Dex string obfuscation, threat handling through a callback instead of app termination, and customizable threat response messages. It also improves runtime performance and stability, and makes some detection alerts easier to see.
New features
Section titled “New features”Hybrid framework support
-
From this version on, apps using React Native 0.79 to 0.85 with the Hermes engine are supported.
-
Projects using JSC (JavaScriptCore) are not supported.
Partial Dex encryption
- Encrypts selected packages to block reverse engineering at the source. This feature was available in 2.x versions and returns in 3.2.0.0. Packages required to start the app are excluded, by design. Rather than applying it everywhere, select the core packages that sit in an obfuscation blind spot or that are called mid-cycle.
Partial Dex string obfuscation
- Dex string obfuscation now covers much more of the app, which strengthens static defense. The new partial encryption sub-option lets you apply it only to the packages that need it most, so you get the security benefit while keeping the impact on startup performance and binary size small.
Threat handling through a callback instead of app termination
- On threat detection, the app is no longer terminated automatically. A callback (broadcast) carrying the threat information is delivered to the app instead. You implement the logic that receives and handles the callback. Contact the Help Center if you need the integration guide.
Customizable threat response messages
- You can now edit some UI elements of the detection alert and the wording of the detection message. This feature is available to approved customers only.
Improvements
Section titled “Improvements”New and strengthened tamper protection compatibility options
Two options are available to keep compatibility across deployment environments and to strengthen protection. Use them where the app’s internals can change, such as with Google Play automatic integrity protection or Play Games Sidekick.
-
Disable file integrity check: Turns off the AppSecurity integrity check to avoid conflicts with the integrity protection of the deployment environment.
-
Signing certificate identity check: Performs an additional integrity check based on the app signing key. Use it alongside the file integrity check or on its own.
Runtime performance and stability
- Runtime improvements raise system stability considerably. CPU usage, which can affect app performance, is lower than in the previous version.
Wider DEX obfuscation coverage
- DEX obfuscation now applies to the whole app rather than only to identifiable customer packages. Identifiable third parties are still excluded. With the Maximum option, obfuscation is stronger than in the previous version.
Clearer detection alerts
- Detecting USB debugging or developer options no longer moves the user to the settings screen automatically, which used to hide the detection popup immediately.
-
Fixed a bug where some vulnerability detection popups did not display correctly.
-
Fixed FamilyLink being blocked along with the work profile.
-
Fixed a bug where some normal environments were detected as rooted.
Supported environments
Section titled “Supported environments”Android version support
This release was verified on Android 17.
- For the EoS/EoL policy for Android OS versions, see the help center document.
React Native support
Hybrid frameworks are supported from this version on. The supported apps are:
-
0.79.0 to 0.83, Hermes engine
-
0.84 to 0.85, Hermes V1 engine
Frequently asked questions
Section titled “Frequently asked questions”You can check the FAQ for the new version in the help center document.