Study into the Implications of Smartphone Operating System Security

Recommendations

Info

Study into the implications of Smartphone operating system security Google invoked this function in March 2011 when 58 MM-infected Apps were found on Android Market. It was claimed that around 260,000 Android devices had downloaded the MM and Google invoked the Kill Switch in an attempt to remove it. In blog posting on its Google Mobile Blog, the company announced: “We are pushing an Android Market security update to all affected devices that undoes the exploits to prevent the attacker(s) from accessing any more information from affected devices. If your device has been affected, you will receive an email from android-marketsupport@google.com over the next 72 hours. You will also receive a notification on your device that “Android Market Security Tool March 2011” has been installed. You may also receive notification(s) on your device that an Application has been removed. You are not required to take any action from there; the update will automatically undo the exploit. Within 24 hours of the exploit being undone, you will receive a second email.” 108 Third-party Android App stores Third-party Android app stores operate around the world and in some regions, Russia, Taiwan and China in particular; they are more popular than the official Google Play app store. Third-party Android app stores are operated by a variety of organisation that includes mobile device manufacturers, MNOs and independent organisations including Amazon (both an ecommerce retailer and an Android handset manufacturer with its Kindle Fire). The Wireless Industry Partnership (WIP) has a list of third-party Android app stores that is an excellent reference point and highlights what a vibrant market this is. Popular Chinese-based Android app stores include: AppChina GoMarket For many unofficial Android app stores there is a lack of control mechanism and security checks. These include: Weak registration checks including non-existent identity checks No DRM No App signing Weak submission rules No MM detection No App revocation (including use of the “Kill Switch”) Allowing Fake and Repackaged Apps to be submitted No policy for illegitimate or illegal content Allowing hard-core adult content (there are even specialist app stores for this) 108 http://googlemobile.blogspot.com/2011/03/update-on-android-market-security.html Goode Intelligence © 2013 P a g e | 121 www.goodeintelligence.com
Study into the implications of Smartphone operating system security There has been recent activity that may suggest that some of the more commercially successful and legitimate third-party Android app stores may be improving their processes and security mechanisms. In February 2013 the Russian-based security vendor, Kaspersky Labs, announced plans that they were to protect an Android app store, Yandex.Store, using Kaspersky’s integrated antivirus engine. 109 All submitted Android apps will be scanned using Kaspersky’s antivirus technology to prevent malware from entering the store. 109 Kaspersky Lab to protect new Yandex.Store app store. 25 February 2013: http://www.kaspersky.com/about/news/business/2013/Kaspersky_Lab_to_protect_new_Yandex_Stor e_app_store Goode Intelligence © 2013 P a g e | 122 www.goodeintelligence.com
Page 1 and 2:
www.goodeintelligence.com £ Study
Page 3 and 4:
Study into the implications of Smar
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72: Study into the implications of Smar
Page 121: Study into the implications of Smar
show all

Study into the Implications of Smartphone Operating System Security

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?