Top

Published in:

2013 | OriginalPaper | Chapter

Android Security, Pitfalls and Lessons Learned

Authors : Steffen Liebergeld, Matthias Lange

Published in: Information Sciences and Systems 2013

Publisher: Springer International Publishing

Activate our intelligent search to find suitable subject content or patents.

search-config

AI-assisted search

Off

Abstract

Over the last two years Android became the most popular mobile operating system. But Android is also targeted by an over-proportional share of malware. In this paper we systematize the knowledge about the Android security mechanisms and formulate how the pitfalls can be avoided when building a mobile operating system.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

previous chapter NEMESYS: First Year Project Experience in Telecom Italia Information Technology

next chapter Mobile Network Threat Analysis and MNO Positioning

There are more than 110 permissions in Android. A full list is available at http://developer.android.com/reference/android/Manifest.permission.html.

Adventures in BouncerLand (2012) Failures of automated Malware detection within mobile application markets. http://media.blackhat.com/bh-us-12/Briefings/Percoco/BH_US_12_Percoco_Adventures_in_Bouncerland_WP.pdf, July 2012

Android Dashboard (2012) https://developer.android.com/about/dashboards/index.html, Dec 2012

Arstechnica (2012) The checkered, slow history of Android handset updates. http://arstechnica.com/gadgets/2012/12/the-checkered-slow-history-of-android-handset-updates/, Dec 2012

Arstechnica (2012) What happened to the Android Update Alliance? http://arstechnica.com/gadgets/2012/06/what-happened-to-the-android-update-alliance/, June 2012

An evaluation of the application verification service in android 4.2. http://www.cs.ncsu.edu/faculty/jiang/appverify/, Dec 2012

Google Mobile Blog (2012) Android and security. http://googlemobile.blogspot.de/2012/02/android-and-security.html, Feb 2012

Amazon Appstore (2013) http://www.amazon.com/mobile-apps/b/ref=sa\_menu\_adr\_app?ie=UTF8&node=2350149011, April 2013

Android Developer Documentation (2013) Binder. http://developer.android.com/reference/android/os/Binder.html, Jan 2013

AndroidPit (2013) http://www.androidpit.com/, Apr 2013

10.

Arstechnica (2013) More "BadNews" for Android: New malicious apps found in Google Play. http://arstechnica.com/security/2013/04/more-badnews-for-android-new-malicious-apps-found-in-google-play/, Apr 2013

11.

F-Secure Mobile Threat Report Q4 2012. http://www.f-secure.com/static/doc/labs_global/Research/Mobile20Threat20Report20Q4202012.pdf, March 2013

12.

Gizmodo (2013) Why Android Updates Are So Slow. http://gizmodo.com/5987508/why-android-updates-are-so-slow, March 2013

13.

Google Play Developer Distribution Agreement. http://www.android.com/us/developer-distribution-agreement.html, Apr 2013

14.

Google Play Developer Program Policies. http://www.android.com/us/developer-content-policy.html, Apr 2013

15.

Seandroid wiki (2013). http://selinuxproject.org/page/SEAndroid, Apr 2013

16.

Barrera, D, Kayacik HG, van Oorschot PC, Somayaji A (2010) A methodology for empirical analysis of permission-based security models and its application to android. In: Proceedings of the 17th ACM conference on computer and communications security, CCS ’10, ACM, New York, NY, USA, pp. 73–84. http://doi.acm.org/10.1145/1866307.1866317

17.

Felt AP, Chin E, Hanna S, Song D, Wagner D (2011) Android permissions demystified. In: Proceedings of the 18th ACM conference on Computer and communications security, CCS ’11, ACM, New York, NY, USA, pp. 627–638. http://doi.acm.org/10.1145/2046707.2046779

18.

Kelley P, Consolvo S, Lorrie C, Jung J, Sadeh N, Wetherall D (2012) An conundrum of permissions: installing applications on an android smartphone. Workshop on Usable, Security

19.

Symantec (2013) Internet security threat report. Technical report, Apr 2013. http://www.symantec.com/content/en/us/enterprise/other_resources/b-istr_main_report_v18_2012_21291018.en-us.pdf

Title: Android Security, Pitfalls and Lessons Learned
Authors: Steffen Liebergeld
Matthias Lange
Publisher: Springer International Publishing
Book: Information Sciences and Systems 2013
Print ISBN: 978-3-319-01603-0

Electronic ISBN: 978-3-319-01604-7

Copyright Year: 2013
DOI: https://doi.org/10.1007/978-3-319-01604-7_40

Springer Professional

Abstract

Please log in to get access to your license.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Premium Partner