The digital landscape is constantly evolving, and with it, the threats to our devices. A common question that arises, particularly in enterprise settings utilizing managed Android devices, is whether...
Updated 21 days ago
Version 2.0
Blog Post
Interesting article Bigdogburr , thanks for sharing.
I like Android's philosophy on being a platform that can be used on wide range of devices and where users are able to bypass standard settings to create a device that works for them. You are not limited to what Android can do by default, but you are able to add apps that are able to do what you want.
But thats also a big big downside when looking at the security side of things. I understand GPP helps a lot, but some of the reports about malware are about the AOSP version, shouldn't there be more focus on security on the core OS side perhaps? That might help to set Android in a more positive light. I have so many discussions with customers saying that the "other" platform is more secure than Android, its getting a bit annoying. And that coming from someone who sells and works with both Android and its alternative competitor.
Alex_Muc, can you tell more about the accessibility services being targeted or what you did to prevent that?
Hi Michel, we do not do any malware protection for AOSP, only Google Play Protect certified devices. We do not have visibility into A Device Maker that uses AOSP devices and cannot guarantee much of any security requirements. Those device makers are not required to stick to the guidelines and requirements that are in the Compatibility Definition Document (CDD) nor do the devices have a Google Cert embedded in hardware backed security. We do however implement all kinds of platform security mechanisms in AOSP which are standard such as memory sanitizers, ASLR, KASLR, MAC for the Kernel Domains, etc.... But again, a device maker that makes an AOSP version can remove and alter any of the protections we put in place.
I am also in the process of building a new updated AE Security course on the academy that touches on some of the platform items.
ah that makes sense, thanks for adding this!
Looking forward to your security course, i have a lot the learn on that side of android