Method and device for providing verifying application integrity

摘要

During execution (S302) of a modified application that has been obtained by modification of an unmodified application a device (110) determines (S304) that code corresponding to the unmodified application also corresponds to the modified application, generates a checksum for the code corresponding to the unmodified application that is compared (S306) with a stored checksum for the unmodified application to determine whether these match, and determines (S310) that the integrity of the modified application has been successfully verified in case the modified application corresponds to the code corresponding to the unmodified application and in case the checksum for the code corresponding to the unmodified application matches the stored checksum for the unmodified application. The solution is particularly suitable for devices using the Android OS since the DEX during installation is optimized to an ODEX for which there is no certified checksum.