Many Android apps pose privacy threat, says security vendor
IDG News Service - As many as 20% of applications on Android Market let third parties access private or sensitive information, according to a report from security vendor SMobile Systems.
SMobile, which develops software for protecting smartphones, has performed an analysis of over 48,000 applications available on Android Market, and looked at what permissions are granted to the application by the mobile operating system.
The permissions -- which allow applications to do a multitude of things, including initiating a phone call, reading SMS (Short Message Service) messages or identifying the phone's location -- are there to help people develop useful applications. But applications might also access those kinds of personal data for nefarious purposes, according to SMobile.
In addition, some 5% of Android apps can be used to place a call to any number, and 2% of applications can send an SMS to an unknown premium number, in both cases without user involvement.
A majority of these applications were developed with the best of intentions and the user data will likely not be compromised, according to SMobile. But there have been cases of the opposite: A bank phishing application that was published by an author by the name of Droid09 was found and removed from Android Market, it said.
Android's security model requires that applications declare the permissions they will be using prior to installation by the user. An informed user can use these declarations to decide if they want to install an application or not, according to SMobile. However, the fact remains that there is no means available for a user to know for sure that the application they just downloaded is doing only what the user sees it doing, it said.
- Comprehensive Advanced Threat Defense The hot topic in the information security industry these days is "Advanced Threat Defense" (ATD). This paper describes a comprehensive, network-based approach to...
- Advanced Threat Defense: A Comprehensive Approach In this interview, Peter George, president, General Dynamics Fidelis Cybersecurity Solutions, explains why we need more than anti-malware, and what constitutes a comprehensive...
- Market Overview: Digital Customer Experience Delivery Platforms Forrester states that businesses today struggle to understand and use the tools necessary to create and manage unified, multichannel digital customer experiences across...
- The Growing Demand for Rich Media This white paper discusses how IBM Customer Experience Suite Rich Media Edition can automate rich media workflows, from collaborating with creative agencies and...
- Data Protection and Disaster Recovery with iSCSI and VMware Get this on demand webcast now
- It's not too late...Get Your Mobile Questions Answered Live! How can IT provide seamless and secure mobile communications and collaboration for all? Join this live Webcast as IDG asks an expert panel... All Privacy White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!