An overview of the Android marketshare gives context to why Android security is so important. We look at some of the primary reasons Android is insecure and a couple of solutions that have been proposed.

1. security threat solutions
Android OS

2. Overview
● mobile context
● security challenges
● proposed solutions

3. Android
Open Handset Alliance
● Google
Open Source
● Base OS
● Application Middleware
● Java SDK
● System Application

4. Mobile
IDC: International Data Corporation
● 12/2012 Global Market Share Report
○ 68% Android OS
○ 19% Apple iOS
○ 5% RIM Blackberry OS
○ 3% MS Windows Phone
● Worldwide Quarterly Mobile Phone Tracker
○ 207.6 million units shipped 4Q12: 91.1% (APL+AND)
○ 70.2% increase from 4Q11
○ 722.4 million units shipped 2012: 87.6% (APL+AND)
○ 494.5 million units shipped 2011: 68.1% (APL+AND)

5. Market
GooglePlay
● ~700,000 applications
● 25 billion downloads
● 1.6 billion downloads/month
Apple
● ~700,000 applications
● 30 billion downloads

6. Security
iOS
● well designed
● largely resistant to attack
Windows
● ok for low level requirements
Blackberry
● considered most secure
Android
● considered least secure

7. Consumer

8. Enterprise
● Category 1: Routine
● Category 2: Important
● Category 3: Sensitive
● Category 4: Top-Secret

9. Solution
Cloud Based Reputation
● each app has unique ID
● store reputation for each app
● reputation classifications
○ good
○ unknown
○ bad
● pro: increases user awareness and power
● con: user's can't be trusted

10. Solution
OS Augmentation: Saint
● Secure Application INTeration
● governing framework
● policy enforcement
○ install-time
○ run-time
○ administrative
○ operational
● pro: integrated
● con: adoption

11. Conclusion
Android
● Largest target
● Greatest weakness
○ provenance
○ permissions
● Empower users
● OS Augmentation