RASP Feature Overview

RASP (runtime application self-protection) features protect the application against several attack vectors.

Currently, In-App Protection Shielder for Android covers the following problems:

• Root Detection
• Runtime Tampering Detection
• Repackaging Detection

The protection starts automatically when the application launches.

Configuration

RASP features are configured in the rasp section of the configuration file. Each feature is turned on with enabled: true and requires a response. When a feature detects an issue, it responds with one of the following actions:

• terminate: the application is terminated. If exit_url is set, the URL is opened in the browser first.
• no_action: the application keeps running.

rasp:
  root:
    enabled: true
    response:
      action: terminate
      exit_url: https://example.com/security/root

Recommended Responses

In general, the following is recommended:

• Enable all features with the terminate response in release builds.
• Open an exit URL with an explanation when a rooted device is detected.
• Use no_action only in internal builds.
• Test the shielded application with all integrated third-party SDKs before release.

Read Next

• Root Detection