Android 中的资产安全
我们如何确保 Android 资产的安全，以便在应用部署后没有人可以读取它们？
How can we make Android assets secure so that no one can read them after app deployment?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
您无法阻止顽固的攻击者阅读它们。
使用您自己的应用程序级加密至少会使问题成为您的应用程序独有的问题，但有人仍然可以对您的应用程序进行代码分析以找出如何解密它们。
该平台有限的复制保护机制较弱，因为所有应用程序只需破解一次（例如通过root手机）。
平台功能使用的资产也容易受到配置为转储其副本的修改平台的影响。
如果您愿意，可以采取一些简单的措施来阻止不熟练的用户随意复制，然后将您的时间和精力节省下来用于您实际上可以赢得的战斗，例如应用程序的质量。
There is nothing you can do that will stop a determined attacker from reading them.
Using your own application level encryption would at least make the problem unique to your application, but someone could still do code analysis of your app to figure out how to decrypt them.
The platform's limited copy protection mechanisms are weaker, because they only have to be defeated once for all applications (such as by rooting the phone).
Assets utilized by platform functionality would also vulnerable to a modified platform configured to dump out copies of them.
Do what is easy to stop casual copying by unsophisticated users if you like, but then save your time and energy for battles you can actually win, such as the quality of your application.