Advanced Detection Capabilities

Important Update - Harmony App Protect End of Support

 

Check Point’s Harmony App Protect will be end of support soon.

For more information on key actions and timelines, see Harmony App Protect End-of-Life - Check Point CheckMates.

Check Point supports advanced detection from version 3.6.3.x and includes these capabilities:

  • Anti-debugging - Attaches detection debugger.

  • Anti-emulation - Detects when a host application is run on an emulator.

  • Anti-instrumentation - Detects hooking frameworks (for example, Frida), usually used to inspect host application logic.

When one of these cases is detected, the application is terminated to protect the host application. The feature is automatically enabled when you initialize the Harmony App Protect, and you cannot disable it. This provides the best way to protect the app from inspection. Returning the status through the Java API can be patched easily and therefore bypassed.

Note - If you experience any challenges to debug your own application during development, use one of these solutions:

  1. Do not initialize the Harmony App Protect during the development.

  2. Use the additional (stub) artifact during development.
    Example from build.gradle:

    Copy 
    dependencies {
     debugImplementation "com.checkpoint.sbm.sdk:stub:$SBM_VERSION"
    }

     

    For more information, download and see the Demo app - Android in the Using SDK page.

     

    The stub artifact does not include any detection logic and should be used only for development purposes.

For the complete list of Harmony App Protect detection capabilities, see Harmony App Protect Detection Capabilities.