SECURITY AND HACKING ANDROID MOBILE DEVELOPMENT .pdf

Mobile development security

1. Security and
Hacking

2. Security
Security for information technology (IT) refers to the
methods, tools and personal used to defend an
organization's digital assets.
The goal of IT security is to protect these assets,
devices and services from being disrupted, stolen or
exploited by unauthorized users, otherwise known as
threat actors.
These threats can be external or internal and
malicious or accidental in both origin and nature.

3. Hacking
Hacking is the act of identifying and then
exploiting weaknesses in a computer
system or network, usually to gain
unauthorized access to personal or
organizational data.
Hacking is not always a malicious activity,
but the term has mostly negative
connotations due to its association with
cybercrime.

4. Android
Security Model
Linux Kernel Security: Android is built on a
Linux kernel, which provides a robust
security foundation.
App Sandbox: Each Android app runs in its
own sandboxed environment, isolated from
other apps.
Google Play Protect: Google Play Protect is
a built-in security feature that scans apps
on the device and in the Play Store for
potential threats.

5. Security
Features
Potential Threats
Objectives of the
Security Features
Primary Security
Features

6. Potential
Threats
Disclosure of information in violation of
policy
Loss or destruction of data.
Unacceptable delay in restoring data in
case of catastrophic failure.
Undetected modification of data.

7. Objectives of the
Security Features
Protect encrypted data from disclosure.
Minimize exposure to attacks.
Provide sufficiently high reliability and
availability.

8. Primary Security
Features
Authentication: Ensuring that only authorized
individuals get access to the system and data
Access Control: Control to system privileges
and data; this access control builds on
authentication to ensure that individuals only
get appropriate access
Audits: Allows administrators to detect
attempted breaches of the authentication
mechanism and attempted or successful
breaches of access control.

9. Types of
Android Attacks
Untrusted APK’s: Attackers lure users to
download applications from untrusted sources.
SMS: The user may come across a suspicious
SMS giving them big bounty’s.
Email: Phishing emails may redirect the users
to malicious websites compromising the user’s
details.
Spying: Some applications may spy on the
mobile users and report to the remote
attackers.

10. Hacking Threats
to Android
Physical security: physically securing our
mobile devices.
SIM hijacking: the abuse of a legitimate
service offered by telecom firms when
customers need to switch their SIM and
telephone numbers between operators or
handsets.
Open Wi-Fi: They are intended to be a
customer service, but their open nature
opens them up to attack.

11. Countermeasures
DO NOT
DOWNLOAD
APPLICATIONS
FROM UNTRUSTED
THIRD PARTY
SOURCES.
DO NOT CLICK ON
SUSPICIOUS
EMAILS.
DO NOT OPEN
SUSPICIOUS SMS.
USE STRONG
PASSWORDS/PATT
ERNS.
DO NOT STORE
PASSWORDS ON
PHONE.
UPDATE THE
OPERATING
SYSTEM
REGULARLY.
USE STRONG
ANTI-VIRUS.

12. Advantages of Security
INCREASED
CUSTOMER TRUST.
IMPROVED
REPUTATION AND
BRANDING.
INCREASED SALES
AND MARKET SHARE.
REDUCED
SOFTWARE SYSTEMS
MAINTENANCE
COSTS.
REDUCED LEGAL
FEES AND EXPENSES.

13. Disadvantages of Security
HIGH COST OF
IMPLEMENTATION.
COMPLEX
MANAGEMENT.
POTENTIAL FALSE
SENSE OF
SECURITY.
COMPATIBILITY
ISSUES.
INCONVENIENCE
TO USERS.