> For the complete documentation index, see [llms.txt](https://cartoonmango-1.gitbook.io/vida-ekyc-integration/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cartoonmango-1.gitbook.io/vida-ekyc-integration/integration-methods/sdk/overview/injection-layer.md).

# Injection Layer

## Emulator Detection

This feature detects when your application is running on an emulator rather than a real device. It safeguards your app's integrity by ensuring it runs only on genuine devices.

**Why it's Essential**

Emulators can be used for reverse engineering, replicating app environments, or automating attacks. Detecting emulators prevents these security risks.

## **Debugger Detection**

Debugger Detection identifies and thwarts attempts to debug or reverse-engineer your app.

**Why it's Essential**

Debuggers can intercept and alter an app's execution or extract sensitive information. Preventing debugging makes it harder for attackers to understand or manipulate your app's internal workings.

**Protection against Rooted and Jailbroken Devices**

**What it Does**

The SDK recognizes when an app is operating on a rooted Android device or a jailbroken iOS device.

**Why it's Essential**

Rooted and jailbroken devices bypass OS security mechanisms, making apps vulnerable to malware, unauthorized modifications, or data breaches. Detecting such devices preserves the app's security posture.

## Metadata Inspection

**Image Size and Resolution**

VIDA’s SDK bolsters the security of image data by extending the metadata of an image with an HMAC (Hash-based Message Authentication Code) signature. This ensures image integrity and authenticity during transmission.

**How it Works:**

1. Signature Generation: HMAC signature generated for each image.
2. Metadata Extension: Signature added to the image's metadata.
3. Backend Validation: Server regenerates the HMAC signature and compares it with the image's metadata for integrity verification.

**Purpose:**

* Ensure image data integrity.
* Verify image authenticity and trusted sources.

## Payload Integrity

**Prevention of Injection Attacks**

**HMAC for Payload Integrity:**

* HMAC ensures payload integrity.
* SSL Pinning for communication security.

**SSL Pinning:**

* Pins the server's certificate or public key to the app.
* Protects against Man-in-the-Middle (MitM) attacks.
* Rejects connections not matching the pinned certificate.