Every time a customer downloads an app, they need to feel confident that it’s free from viruses, spyware, and other threats. Code signing builds that trust—by providing a “digital shrink wrap” that protects your legitimate software from tampering and infection. But traditional code signing has weaknesses that malware developers have learned to exploit. Keep reading to explore the issues, the answers and the future of code signing.

1. Every time a customer
downloads an app...
they need to feel confident that it’s free from viruses,
spyware, and other threats. Code signing builds that trust—by
providing a “digital shrink wrap” that protects your legitimate
software from tampering and infection. But traditional code
signing has weaknesses that malware developers have learned
to exploit. Keep reading to explore the issues, the answers
and the future of code signing.
PRESENTPRESENTPRESENT
PAST,PAST,PAST,
MONEYTREE
NEW APP!
DIGITAL “CODE SIGNING”
CERTIFICATE
SECURE PRIVATE KEY
KEYS AND
CERTIFICATES ARE
DOWNLOADED AND
MANAGED LOCALLY
2
3
4
MONEYTREE1
The Problem?
Option 1: Do it Yourself
Option 2: Cloud-based Code Signing
AND
FUTUREFUTUREFUTURE
X
SIGN HERE
Private keys are managed locally,
which means they can be:
You could try to manage and secure your code
signing certificates and keys yourself, but it’s:
Or you could use a cloud-based code signing
solution like Symantec Secure App Service.
THE ANSWER
TRADITIONAL CODE SIGNING: PRIVATE KEYS AND
LOCAL CERTIFICATES
THE PROBLEM?
X
!
STOLEN
COMPROMISED
SHARED
TIME CONSUMING
2
3
1
SEND YOUR APPLICATION
TO THE SERVICE
CERTIFICATES AND KEYS
ARE CAREFULLY
MAINTAINED, MANAGED,
AND SECURED BY
SYMANTEC IN THE CLOUD
SIGN YOUR APPLICATIONS AND
MAINTAIN A SAFE REPUTATION
DIFFICULT TO
SCALE
LESS SECURE
EXPENSIVE
$$$
COMPLICATED
X
APPLY NOW
You get all the advantages of the
best code signing technology with
none of the risks or hassles.
PLUS,you gain instant access to the latest code
signing technology and features:
Role-based access
Full reporting and auditing
Automated time stamping
Support for all types of signing,
including Microsoft, Java and Android
Developer vetting services
APIs for automating processes
X
THIS APP HAS BEEN
CODE-SIGNED.
APPLICATION INFO
Visit
go.symantec.com/
secure-app-service
to explore the future of code signing.
X