Go Back   Tech Support Forum > Security Center > Computer Security News

User Tag List

More than 290,000 Google Play Android apps pose 'high-risk' to security, says Bit9

This is a discussion on More than 290,000 Google Play Android apps pose 'high-risk' to security, says Bit9 within the Computer Security News forums, part of the Tech Support Forum category. One-quarter of more than 400,000 Android apps examined in the Google Play store pose security risks to mobile-device users, according


Closed Thread
 
Thread Tools Search this Thread
Old 11-01-2012, 02:32 PM   #1
Security Manager
Analyst
Rangemaster, TSF Academy
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 39,536
OS: Windows 10 Pro

My System


One-quarter of more than 400,000 Android apps examined in the Google Play store pose security risks to mobile-device users, according to new research.

Security vendor Bit9 categorised these Android apps as "questionable" or "suspicious" because they could gain access to personal information to collect GPS data, phone calls or phone numbers and much more after the user granted "permission" to the app. "You have to say 'yes' to the application or it won't run," pointed out Harry Sverdlove, Bit9 CTO. Games, entertainment and wallpaper apps especially seem to want to grab data, even though the their functions would seem to have little direct use for it.

Bit9 notes this doesn't mean these apps are malware per se, but they could do damage if compromised because the user has granted so much permission.

There are said to be about 600,000 apps in Google Play, and Sverdlove says Bit9 is now compiling a "reputation" database of Android apps. The firm is also going to move on to other app stores, including those from Apple and Amazon, in order to create mobile security products that can protect users based on risk-scoring of apps.

Reputation-based approaches have become commonly used throughout the security industry for protecting Web users, for example, against malware-infested sites, and now there's interest in applying similar ideas to analyzing risk associated with mobile apps.

Broken down, Bit9 categorised these "questionable" and "suspicious" apps it found in Google Play this way:

42 percent access GPS location data, and these include wallpapers, games and utilities

31 percent access phone calls or phone numbers

26 percent access personal data, such as contacts and email

9 percent use permissions that can cost the user money

In its report, Bit9 describes its methodology as crawling Google Play to collect detailed information about 412,000 mobile apps, including publisher, popularity, user rating, category, number of downloads, requested permissions and price.

Of the 412,222 Android apps evaluated from Google Play, Bit9 says more than 290,000 of them access at least one high-risk permission, 86,000 access five or more and 8,000 apps access 10 or more permissions "flagged as potentially dangerous." It defined risk level according to relative degrees of privacy intrusion and the app's feature set, perhaps the ability to wipe devices or change systems settings.

The study also included a survey of 138 IT professionals responsible for mobile security for over 400,000 users in their organisations. It found:

78 percent think phone makers do not focus enough on security, but 71 percent allow employee-owned devices to access their organisation's network.

Only 24 percent deploy some form of app monitoring or control to grant visibility into employees' devices.

84 percent feel Apple iOS is "more secure" than Android and 93 percent of respondents allow iOS to access their network. Only 77 percent allow Android devices, and in something of a surprise, 13 percent say they allow rooted Android or "jailbroken" iPhone devices onto their networks.

96 percent allowing personal devices also allow employees to access email using the device, while 85 percent allow access to company calendar data.

The potential for trouble in all this, according to Bit9, is that apps that can access all this user data could become the open door for hackers to exploit in the future.


290,000 Google Play Android apps pose 'high-risk' to security, says Bit9 - Techworld.com
Glaswegian is offline  
Sponsored Links
Advertisement
 
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
Repost Per: CatByte Trojan:dos/alureon.e and SmartHDD problem
Trojan:dos/alureon.e and SmartHDD problem Hello, I hope I'm at the right area for help. This pc I'm on was infected with Trojan:dos/alureon.e and SmartHDD. I was able to get to the net somehow and I installed and ran Malwarebytes and got rid of SmartHDD. Then I ran Windows Defender and it found...
mg67 Resolved HJT Threads 23 07-30-2012 06:24 AM
Windows XP PC unable to access internet or copy files
Hi - I have a Dell slimline PC running Windows XP that is slowly losing all functionality. I cannot load IE, Chrome has a message ERR 138 (Access Denied). I am unable to copy files from a USB stick and cannot remove certain programs (er McAfee) using the Add / Remove program utility. :facepalm: ...
NDWales Virus/Trojan/Spyware Help 54 07-15-2012 03:19 PM
Virus blocking internet access.
After removing XP Antispyware 2012,I can no longer connect to the internet.It just says "acquiring network address". When I do ipconfig it says "RPC server is unavailable".There's nothing wrong with the internet connection itself.Just something on my computer preventing it from connecting. ....
honeybe Resolved HJT Threads 28 01-10-2012 02:26 AM
"System Fix" virus hijacked computer
Hello, I’ve got a computer infected with the “System Fix” Virus. I believe the OS is Windows XP Professional. Searching the Tech Support Forum lead me to this thread: https://www.techsupportforum.com/forums/f50/im-in-trouble-614906.html Since that thread is getting quite long, I figured...
SilentJim Resolved HJT Threads 48 12-02-2011 08:10 AM
System Restore Virus Not removed completely
I recently got a System Restore Virus and was able to remove a lot of it using Malwarebytes. My scan is now clean although my TrendMicro Software is picking up several viruses/trojans that it cannot remove and google searches are redirected. I had difficulty downloading and running dds (it runs...
tdoby724 Resolved HJT Threads 16 11-07-2011 02:04 PM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 03:09 AM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts