SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

Unveiling Android™ OS Security Layers

jmattes avatar
jmattes
18 diapositives · 254 Views · Jan 07, 2020

Explore the history, architecture, applications, and security features of the Android™ Operating System, emphasizing the importance of confidentiality, integrity, and availability. Learn about Android™ security concerns, principles of secure design, and recommended best practices. References included.

Unveiling Android™ OS Security Layers - slide 1
01 / 18Unveiling Android™ OS Security Layers
1 / 17

Télécharger la présentation

Unveiling Android™ OS Security Layers
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. ANDROID™ OS Security A brief synopsis of the Android Operating System and its security. By Daniel Angelis

  2. The ANDROID™ OS History Google acquires mobile software startup Android™ in 2005 Open Handset Alliance officially starts on November 5th, 2007 Android™ 1.0 source and SDK released in Fall 2008 (http://www.android.com/timeline.html)

  3. The ANDROID™ OS Versions 1.1 February 2009 1.5 (Cupcake) April 2009 1.6 (Donut) September 2009 2.0/2.1 (Éclair) October 2009 2.2 (Froyo) May 2010 3.0 (Gingerbread) Not expected before Q4 2010

  4. The ANDROID™ OS System Architecture Linux Version 2.6 Davlik Virtual Machine (VM) Application Framework

  5. http://developer.android.com/images/system-architecture.jpg

  6. The ANDROID™ OS Applications Applications are Java Applications are run on Davlik Virtual Machine Development done by Android™ SDK Development is open to all User driven Android™ Market

  7. ANDROID™ Security Security triad applicability Confidentiality Integrity Availability

  8. ANDROID™ Security Android Security Relies on security of it’s foundations; Linux, Davlik, and Java. Security Goal: “A central design point of the Android security architecture is that no application, by default, has permission to perform any operations that would adversely impact other applications, the operating system, or the user.”

  9. ANDROID™ Security Enforcement strategy Application signing and certification. Linux user name base access restriction Capability permissions

  10. ANDROID™ Security Application Sandboxes All Applications run as their own Linux user. Several Inter-Process Communication methods: Activities Services BroadcastReceiver ContentProvider Intent Applications utilize a capability like model to protect the system and the user.

  11. ANDROID™ Security Android™ Capabilities and Permissions Capabilities default to safe state Must be explicitly defined to enable capabilities Permissions are static on install Users have open view of permissions

  12. ANDROID™ Security http://developer.android.com/reference/android/Manifest.permission.html http://www.simplehelp.net/images/quick_gps/img06.png

  13. ANDROID™ Security Security Concerns for developers Protect your application, use least privilege principle. If you expose, mediate IPCs Provide maximum availability Minimize memory footprint Minimize battery usage

  14. ANDROID™ Security Security Concerns for users Do your research Read reviews. Analyze capabilities/permissions before installing. Use Common sense. http://www.downloadsquad.com/2010/06/28/understanding-the-android-market-security-system/

  15. ANDROID™ Security Security Analysis Mediation Verifiability Integrity of TCB

  16. ANDROID™ Security Principles of Secure Design Least Privilege Fail Safe Defaults Economy of Mechanism Complete Mediation Defense in depth Open Design Separation of Privilege Least Common Mechanism Psychological Acceptability

  17. Conclusion Secure architecture Reliance on trust As with all things, use your head.

  18. References Burns, Jesse. “Mobile Application Security on Android.” blackhat.com. June 2009. Web. 27 July 2010. <http://www.blackhat.com/presentations/bh-usa-09/BURNS/BHUSA09-Burns- AndroidSurgery-PAPER.pdf> Android Developers, “Security and Permissions.” developer.androide.com. 26 July 2010. Web. 27 July 2010 <http://developer.android.com/guide/topics/security/security.html> Android (operating system) Wiki. <http://en.wikipedia.org/wiki/Android_%28operating_system%29> Elgin, Ben. “Google Buys Android for Its Mobile Arsenal”. businessweek.com. 17 August 2005. Web. 27 July 2010. <http://www.businessweek.com/technology/content/aug2005/tc20050817_0949_t c024.htm> Portions of this presentation are reproduced from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License.