Android (operating system): Difference between revisions

Revision as of 16:12, 23 October 2012

Revision as of 21:20, 23 October 2012

Line 70:

[[File:PlayStorePermissions.png|thumb|upright|left|App permissions in the Play Store.]]

{{see also|Mobile security}}

Android applications run in a [[Sandbox (computer security)|sandbox]], an isolated area of the operating system that does not have access to the rest of the system's resources, unless access permissions are granted by the user when the application is installed. Before installing an application, the [[Google Play|Play Store]] displays all required permissions. A game may need to enable vibration, for example, but should not need to read messages or access the phonebook. After reviewing these permissions, the user can decide whether to install the application.<ref>{{cite web |url=http://source.android.com/tech/security/index.html |title=Android Security Overview |work=Android Open Source Project |accessdate=2012-02-20}}</ref> The sandboxing and permissions system weakens the impact of vulnerabilities and bugs in applications, but developer confusion and limited documentation has resulted in applications routinely requesting unnecessary permissions, reducing its effectiveness.<ref name="demystified">{{cite paper |first1=Adrienne Porte |last1=Felt |first2=Erika |last2=Chin |first3=Steve |last3=Hanna |first4=Dawn |last4=Song |first5=David |last5=Wagner |url=http://www.cs.berkeley.edu/~afelt/android_permissions.pdf |title=Android Permissions Demystified |accessdate=2012-02-20}}</ref> The complexity of inter-application communication implies Android may have opportunities to run unauthorized code.<ref name="int-app-comm">{{cite paper |first1=Erika |last1=Chin |first2=Adrienne Porter |last2=Felt |first3=Kate |last3=Greenwood |first4=David |last4=Wagner |title=Analyzing Inter-Application Communication in Android | publisher=Mobisys | year=2011}}</ref>

Several security firms have released antivirus software for Android devices, in particular, [[Lookout Mobile Security]],<ref>{{cite web |url=http://www.mylookout.com |title=Lookout Mobile Security |publisher=Lookout |accessdate=2012-07-05}}</ref> [[AVG Technologies]],<ref>{{cite web |url=http://www.avg.com/us-en/antivirus-for-android |title=Antivirus for Android Smartphones |publisher=AVG |accessdate=2012-02-16}}</ref> [[Avast!]],<ref>{{cite web |url=http://www.avast.com/free-mobile-security |title=Mobile Security |publisher=Avast.com |accessdate=2012-02-16}}</ref> [[F-Secure]],<ref>{{cite web |url=http://www.f-secure.com/en/web/home_global/protection/mobile-security/system-requirements |title=Mobile Security&nbsp;— System requirements |publisher=F-Secure |accessdate=2012-02-16}}</ref> [[Kaspersky]],<ref>{{cite web |url=http://www.kaspersky.com/mobile_downloads |title=Kaspersky Mobile Security |publisher=Kaspersky.com |accessdate=2012-02-16}}</ref> [[McAfee]]<ref>{{cite web |url=https://www.mcafeemobilesecurity.com/products/android.aspx |title=McAfee Mobile Security for Android |publisher=Mcafeemobilesecurity.com |accessdate=2012-02-16}}</ref> and [[Symantec]].<ref>{{cite web |url=http://us.norton.com/mobile-security/ |title=Mobile Internet Security |publisher=Us.norton.com |accessdate=2012-02-16}}</ref> This software is ineffective as sandboxing also applies to such applications, limiting their ability to scan the deeper system for threats.<ref name = extremetech>http://www.extremetech.com/computing/104827-android-antivirus-apps-are-useless-heres-what-to-do-instead/2 Android antivirus apps are useless, here's what to do instead&nbsp;— access April 10, 2012</ref>