Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Android puts out call to mobile security gurus

By Jeremy Kirk , IDG News Service , 08/20/2008
  • Share/Email
  • Comment
  • Print

Developers of Android, the Linux mobile platform spearheaded by Google, are asking security experts for input.

The latest software development kit for Android was released earlier this week and plans are for the 1.0 version of the operating system to be shipped on mobile phones later this year.

Security is a priority. "As you may expect, building and maintaining a secure mobile platform is a difficult task," wrote the Android Security Team.

"While we have found and fixed many of our own bugs as well as flaws in other open-source projects, we realize that the discovery of additional security issues in a system this large and complex is inevitable," the team wrote, in a message on the Android security announcements section of the Google Groups site.

The invitation means the Android platform will likely get a thorough review from developers outside the Android Open Handset Alliance, a consortium of companies contributing to the platform's development.

Proponents of the open-source development model -- where code can be analyzed by anyone -- argue it results in more secure and stable products in contrast to proprietary software, where the master code is a closely guarded secret by software companies.

The Android Security Team wrote that it hopes security analysts will privately forward bugs since the operating system will eventually be deployed on many different devices that will "require a large amount of coordination to patch."

Mobile devices have not been afflicted by malicious software to the extent of desktop OSes, but experts have said they expect that to change.

Symbian's Series 60 OS was targeted in 2005 by Comwar, a worm that spread via Bluetooth and MMS (multimedia messaging service).

In 2006, researchers found the first for-profit mobile malware, called Redbrowser. When activated, the malware sent SMS (short message service) messages to a phone number that charges around US$6 per message.

It targeted devices running the J2ME (Java 2 Mobile Edition) software, which is included on some 1 billion devices from vendors such as Nokia, Motorola and Research in Motion.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (1)
Login
Forgot your account info?

With smart-phones now being more capable than ever ...By CellTrust on August 20, 2008, 12:16 pmWith smart-phones now being more capable than ever to do extensive web-browsing and access sensitive data, networks are now more susceptible to contracting viruses....

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed