How to Strip Debug Information From a Mobile App

Debug information in mobile apps can display information which leaves a mobile app vulnerable to attacks. Examples of the information which can be exposed are the source code file names, line numbers, variable names and symbol names to name a few. You can use Appdome to strip debug information from the logs for additional mobile app protection. 

This Knowledge Base article summaries the steps needed to use Appdome to easily strip debug information from a mobile app.

We hope you find it useful and enjoy using Appdome!

Stripping Debug Information From Any Mobile App

Appdome is a mobile integration platform as a service (iPaaS) that allows users to add a wide variety of features, SDKs and APIs to Android and iOS apps. Using a simple ‘click to add’ user interface, Appdome allows anyone to easily strip your app of debugging information – instantly, no code or coding required.

Using Appdome, there are no development or coding prerequisites. For example, there is no Appdome SDK, libraries, or plug-ins required to secure your app with Appdome.

What is Debug Information and How Can It Be Abused?

Debug information is data stored inside the code of a mobile app which aids the developer in troubleshooting, tracking down issues, and fixing bugs more easily. As it happens, debug information can also be used by bad actors who want to learn how your app works by reverse engineering your code (or other malicious purposes like copying or stealing your intellectual property).

According to mobile development best practices, the distributed app should be built in release mode (which does not contain debug information). However, more often than not, the released mobile app does contain debug information such as source code file names, line numbers, variable names and symbol names. Rather than going back to the developer and asking them to modify the app,  Appdome offers a quick and easy way to strip debug information from the Android or iOS app – instantly without code or coding.

This KnowledgeBase article will guide you through the steps to complete this on Appdome.

Prerequisites for Using Appdome to Strip Debug Information

In order to use Appdome’s Strip Debug Symbols, you’ll need:

How to Strip Debug Symbols From Any Mobile App on Appdome

Follow these step-by-step instructions to protect your app by stripping debug information from the logs of the app:

Upload a Mobile App to Your Account

Please follow these steps to add a mobile app to your Appdome account.
If you don’t have an Appdome account, click here to create an account.

From the “Build” Tab Select “Strip Debug Information”

Select the Build TabNote: a blue underline will appear showing the step is active

Beneath the Build Tab, you will find several service options. Select SecurityNote: a blue highlight will appear showing the category is active.

From within the Security Tab,

  1. Open TOTALCode™ Obfuscation
  2. Click on the toggle to enable Strip Debug Information
  3. You can use Strip Export Names, to strip the application’s export information. Note: this feature can not be used when the application loads its own symbols. 
  4. Click Build My App
 
The technology behind Build My App has two major elements – (1) a micro-service architecture filled with 1000s of code sets needed for mobile integrations, and (2) an adaptive code generation engine that can recognize the development environment, frameworks and methods in each app and match the app to the relevant code-sets needed to add the requested service to the mobile app in seconds.

Congratulations! When your integration is complete, you will see the notice below. You now have a fully integrated mobile app from which the debug information has been properly removed. This gives you more mobile app protection.

After Removing Debug Information From a Mobile App on Appdome

After you have removed the debug information from a Mobile App on Appdome, there are a few additional steps needed to complete your mobile integration project. Read this Knowledge Base article to learn what to do after you successfully Build an app. It explains both optional steps and required steps.

How Do I Learn More?

Check out Appdome TOTALCode™ Obfuscation or request a demo at any time.

To zoom out on this topic, visit  Appdome for  Mobile App Security on our website.

If you have any questions, please send them our way at support@appdome.com or via the chat window on the Appdome platform.

Thank you!

Thanks for visiting Appdome! Our mission is to make mobile integration easy. We hope we’re living up to the mission with your project. If you don’t already have an account, you can sign up for free.

Dany Zatuchna

Have a question?

Ask an expert

JanMaking your security project a success!