Sunday, June 22, 2014

Security Risks of Androids



Fragmentation

As of publication, there are three big versions of Android: Gingerbread (2.3), Ice Cream Sandwich (4.0) and Jelly Bean (4.1 and 4.2). Together, these account for 95 percent of Android devices on the Internet. This fragmentation comes from the rapid-release cycle of Android, which some manufacturers can't keep up with, while others choose to stick with older versions of the OS for hardware reasons. Devices still using older OS, 2.3, are vulnerable to more security risks, considering that the OS hasn't been updated since September 2011.

Apps

Android comes with the built-in option to install applications from the Android Package (APK) file; this is called 'sideloading' apps. It is disabled by default. This feature allows you to add apps from outside the Google Play store, but presents the risk of installing shady files -- especially if you're sideloading pirated apps, which may include malware in the APK file.However, even apps in the Google Play store present a certain risk in the form of apps that ask for too many permissions. In 2012, the security vendor Bit9 analyzed 400,000 apps in the Play store and found that 42 percent of those apps requested access to GPS data, while 31 percent requested access for phone history.

Data Security

Phishing attempts affect Android devices just as much as PCs. Spammers send SMS or email messages with links or infected downloads that compromise the data on your Android device, or trick you into entering personal information. Some SMS malware also works by sending SMS messages in the background, giving money to the spammers by adding charges to your phone bill.

Protection

The best protection against security risks on an Android device is precaution: don't install apps from developers you don't trust, and don't install pirated apps. Review the permissions of the apps you install from the Play store, and make sure that those permissions are there for a good reason -- not just to read your data. Be wary of using any alternative app stores on your device, as they may not check their apps for security issues. Don't keep sensitive data on your device, and avoid accessing websites that need your personal information. For an extra layer of protection, add an anti-virus app to your Android device.

No comments:

Post a Comment