Jaroslav Novotný, Tomáš Soukal
April 4, 2023

Protecting Your API from App Impersonation: Token Hijacking Guide and Mitigation of JWT Theft

Gone are the days of locally-held data and standalone applications. With the rise of smartphones and portable devices, we are constantly on the go and reliant on network calls for everything from social communication to live updates. As a result, protecting backend servers and API calls has become more crucial than ever.
Gone are the days of locally-held data and standalone applications. With the rise of smartphones and portable devices, we are constantly on the go and reliant on network calls for everything from social communication to live updates. As a result, protecting backend servers and API calls has become more crucial than ever.
You can read more about the concept of RASP (Runtime application self-protection)
here.

You may also like

Shipping Talsec Inside Your Own SDK: Mergeable iOS Frameworks
Shipping Talsec Inside Your Own SDK: Mergeable iOS Frameworks
Read the full article on our blog.
Droppers: how banking trojans get onto Android phones — and how Talsec breaks the chain early
Droppers: how banking trojans get onto Android phones — and how Talsec breaks the chain early
Read the full article on our blog.
[Alert] Hirudo: the Android banking trojan that patches the bank's own app — and how Talsec stops it
[Alert] Hirudo: the Android banking trojan that patches the bank's own app — and how Talsec stops it
Read the full article on our blog.
Read More