what are the security issues in the android operating system.

[lakshmi]

I am final year student doing project on Android Security.I want to
know exactly the security problems involved in this OS.For our study
we got the information like it doesnot provide the security while
communicating the data.
We studied the layers of Android also in that their is know security
block also.
So can anyone help me what are the exact security issues in this and
how we can take up in our final year project.


Thank you....

[lbcoder]

That is a HUGE question and I don't think you will ever get a
*complete* answer to it.
Basically, the issues are the same as with any other platform -- keep
apps from doing dangerous things, keep user data safe from crazy apps,
keep outside intruders from stomping all over everything, etc.

Of course, no doubt you're looking more specifically about the
security model used by android and its implementation details.

You should probably start with this: http://developer.android.com/guide/appendix/faq/security.html

Post by lakshmi
I am final year student doing project on Android Security.I want to
know exactly the security problems involved in this OS.For our study
we got the information like it doesnot provide the security while
communicating the data.
We studied the layers of Android also in that their is know security
block also.
So can anyone help me what are the exact security issues in this and
how we can take up in our final year project.
Thank you....

[Dianne Hackborn]

And the platform documentation on the security design:

http://developer.android.com/guide/topics/security/security.html

Post by lbcoder
That is a HUGE question and I don't think you will ever get a
*complete* answer to it.
Basically, the issues are the same as with any other platform -- keep
apps from doing dangerous things, keep user data safe from crazy apps,
keep outside intruders from stomping all over everything, etc.
Of course, no doubt you're looking more specifically about the
security model used by android and its implementation details.
http://developer.android.com/guide/appendix/faq/security.html

Post by lakshmi
I am final year student doing project on Android Security.I want to
know exactly the security problems involved in this OS.For our study
we got the information like it doesnot provide the security while
communicating the data.
We studied the layers of Android also in that their is know security
block also.
So can anyone help me what are the exact security issues in this and
how we can take up in our final year project.
Thank you....

--
You received this message because you are subscribed to the Google Groups
"android-platform" group.
To unsubscribe from this group, send email to
.
For more options, visit this group at
http://groups.google.com/group/android-platform?hl=en.

--
Dianne Hackborn
Android framework engineer
hackbod-***@public.gmane.org

Note: please don't send private questions to me, as I don't have time to
provide private support, and so won't reply to such e-mails. All such
questions should be posted on public forums, where I and others can see and
answer them.

[dror]

Android OS & Security is in it first steps and Malware isn't really
here yet (which is good:)
Android like any computing device can have virus, exploits, malware
and bad software !

there are OS exploits based on errors on Android & linux .
(Dr Charlie Miller, a security researcher already found a way to
compromise a phone using a bad MP3 song)

Dror

here a short list of security problems we collect about Android
Security , collected by droidSecurity

13/Jan/10 Security flaw found on motorola droid bypasses security
screen

6/Jan/10 Android cracked nook E-reader is a potential security risk

16/Dec/09 Large scale phishing scam targeting android-based mobile
devices

12/Nov/09 Malware applicaton launched for android

10/Oct/09 Two new Android flaws in SMS and Dalvik API could lead to
denial of service

20/Sep/09 Android application InstantRoot gains root by exploiting bug
in bluetooth admin

18/Sep/09 Two Android applications attacking windows users

15/Sep/09 Android 'Spam Apps' developer Crackdown

17/Aug/09 Android App 'Recovery Flasher' exploit Root bug in linux

29/Jul/09 SMS Flaw Fixed in Silent Android Update

25/May/09 Android improper package verification when using shared uids

16/Mar/09 Security Threat With 'Open Home' application

12/Feb/09 Bug in MP3 decoding used to steal android data

26/Jan/09 First Adware App Attacks Android G1?

9/Nov/08 G1 ROOT BUG FOUND

full list can be found at:
http://www.droidsecurity.com/securitycenter.html

[lbcoder]

I definitely do NOT agree that those are all android security
problems.
Some of those are specific implementation issues (i.e. the ones
particular to nook and motorola, as well as the Nov 08 root bug).
Some of those are issues with *other* OS's, i.e. the apps that attack
windoze users.
Spam/phishing apps are NOT security vulnerabilities, those are stupid
user vulnerabilities.
etc.

Post by dror
Android OS & Security is in it first steps and Malware isn't really
here yet  (which is good:)
Android like any computing device can have virus, exploits,  malware
and bad software !
there are OS exploits based on errors on Android & linux .
(Dr Charlie Miller, a security researcher already found a way to
compromise a phone using a bad MP3 song)
Dror
here a short list of security problems we collect about Android
Security , collected by droidSecurity
13/Jan/10 Security flaw found on motorola droid bypasses security
screen
6/Jan/10 Android cracked nook E-reader is a potential security risk
16/Dec/09 Large scale phishing scam targeting android-based mobile
devices
12/Nov/09 Malware applicaton launched for android
10/Oct/09 Two new Android flaws in SMS and Dalvik API could lead to
denial of service
20/Sep/09 Android application InstantRoot gains root by exploiting bug
in bluetooth admin
18/Sep/09 Two Android applications attacking windows users
15/Sep/09 Android 'Spam Apps' developer Crackdown
17/Aug/09 Android App 'Recovery Flasher' exploit Root bug in linux
29/Jul/09 SMS Flaw Fixed in Silent Android Update
25/May/09 Android improper package verification when using shared uids
16/Mar/09 Security Threat With 'Open Home' application
12/Feb/09 Bug in MP3 decoding used to steal android data
26/Jan/09 First Adware App Attacks Android G1?
9/Nov/08 G1 ROOT BUG FOUND
full list can be found at:http://www.droidsecurity.com/securitycenter.html