eMAPT study materials
eMAPT study resources

eMAPT case studies

eMAPT · Put your knowledge to work in context.

The eMAPT page on INE's site currently returns a 404 and redirects to the INE homepage, so no verified statement of the credential's scope, format, length, passing score, fee, retake policy, or validity period is available. The only substantive material the retrieved page carries is a technical write-up filed under the category "PKI / TLS / applied cryptography," which is the single domain reflected in this profile. The eMAPT case studies are 5 cases and about 2,471 words.

1

Pinning That Fails Open on Android 14

A fintech Android app (minSdk 24, targetSdk 34, version 4.2.0) ships a network security config.xml that sets cleartextTrafficPermitted='false' for the base config and adds a domain-config for api.example-bank.com. That domain-config contains a pin-set with expiration='2025-06-30' and two pins: the current leaf certificate SPKI and one backup intermediate CA SPKI.

606 words, about 3 min
2

ATS Exception and a WebView That Leaks a Session Cookie

A retail iOS app (version 3.1, iOS 17 test device) uses ATS with NSAllowsArbitraryLoads=false. Its Info.plist has an NSExceptionDomains entry for cdn.example-retail.com with NSExceptionAllowsInsecureHTTPLoads=true and NSIncludesSubdomains=true, and a second entry for help.example-retail.com with the same flags.

443 words, about 2 min
3

HS256 License Secret Shipped in the APK

An Android productivity app uses a JWT as an offline license. The token is HS256, contains plan ( free or premium ), sub , and exp , and is valid for 365 days.

477 words, about 2 min
4

Keystore Key Invalidated After Biometric Enrollment

An Android field-service app stores a 200 MB SQLite database offline. It encrypts sensitive columns with AES-256-GCM.

467 words, about 2 min
5

Mutual TLS With a Client Certificate in Every APK

An Android banking app uses mutual TLS for its API. Every APK contains assets/client.p12 , a PKCS#12 file with a client certificate and private key, protected by the password changeit stored in BuildConfig .

478 words, about 2 min