You finished your last line of code ahead of schedule, confirmed the app builds properly, passed all your quality tests and now it’s time for that celebratory pizza and beer! A week after launch, you get a call at 3 AM…it’s your boss. Some teenager is tweeting about how your company sucks at security and spelling out all the gory details of where you failed at securing your Android app. How did this happen? Where did you go wrong? Must be some wunderkind hacker, using some serious ninja, 0 day, blackhat stuff, right!? Sorry, this ain’t Hollywood. The answer is almost always that you’ve made the same mistake many developers before you did … you failed to think like an attacker. This talk will focus on how to apply an adversarial perspective to the work that you do, when building Android applications. We’ll focus on how to identify attack surfaces, paths to exploitation and the thought processes penetration testers, as well as attackers, apply to identify weaknesses in your apps.