Android Security

Recommendations

Info

Top 3 Risks Top 3 risks - #1: Linux Kernel • Linux Kernel: vulnerable system calls, or network stack - Vector: Local (usually), Remote (very rare) - Impact: Full system compromise - Reason: Too many cooks, with too many features • Solution: SELinux • Limited scope, not designed for app security (C) 2016 Jonathan Levin & Technologeeks.com - Share freely, but please cite source!
Top 3 Risks Top 3 risks - #1: Linux Kernel • Case Study #1: – TowelRoot (CVE-2014-3153) – futex bug • Case Study #2: – PingPong Root (CVE-2015-3636 ) – ICMP sockets • Case Study #3: (SELinux blocks this one) – Keyrings (CVE-2016-0728) – https://www.exploit-db.com/exploits/40003/ (C) 2016 Jonathan Levin & Technologeeks.com - Share freely, but please cite source!
Page 1 and 2: Android Security: Same-ol’, Same-
Page 3 and 4: Android Internals::about “Android
Page 5 and 6: Mobile Security Trusted app may be
Page 7 and 8: Local Attacks (rogue app, malware)
Page 9 and 10: Android Security A little history (
Page 11 and 12: Android Security Android Applicatio
Page 13 and 14: Android Security Android Code Bases
Page 15 and 16: Android Security Updates (or lack t
Page 17 and 18: Code Injection Prelude: Vectors for
Page 19 and 20: Counter- CounterMeasures for Code I
Page 21 and 22: Top 3 Risks Top 3 risks - #3: File
Page 23: Top 3 Risks Top 3 risks - #2: Binde
Page 27 and 28: Untrustworthy TrustZone Android & T
Page 29 and 30: Untrustworthy TrustZone Android Vul
Page 31 and 32: So, overall.. • Sad Truth: Androi

Android Security

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?