Google to auto probe Android Market for malware

An answer to malware and rebuttal to calls for it to vet apps first.

Google has unveiled Bouncer, its answer to the growing threat of maliciously laced software available on the Android Market.

Bouncer will provide automated malware scanning of Android Market, but Google will not be bowing to calls for it to follow Apple in implementing an approval process for each application on its market.

Apple's mysterious vetting process is arguably one of the main reasons why there remains few if any cases of iOS malware available for download on the App Store.

However, Apple's process could also slow down the release of apps and provide obstacles to building the largest ecosystem. Security researcher Charlie Miller recently detailed some of those challenges during his efforts to bypass Apple's code signing process, which he did, landing him a one year ban from its developer program.

"Here’s how it works," Google's vice president of Android engineer, Hiroshi Lockheimer explained. "Once an application is uploaded, the service immediately starts analysing it for known malware, spyware and trojans."

It will also conduct a behavioral analysis of the app by running it in Google's cloud and comparing it against previously analysed apps to detect anything that might be considered untoward.

"We also analyse new developer accounts to help prevent malicious and repeat-offending developers from coming back," Lockheimer added.

While security vendors across the board reported a huge surge in Android malware throughout 2011, Google's own analysis showed a 40 per cent decline in "the number of potentially-malicious downloads from Android Market."

In other words, Google is saying there might be malware there, but people aren't necessarily downloading those apps.

"While it’s not possible to prevent bad people from building malware, the most important measurement is whether those bad applications are being installed from Android Market - and we know the rate is declining significantly," Lockheimer wrote, noting the drop occurred at the same time as security vendors were reporting a rise in Android malware.

Bouncer follows a controversial rant by Google open source champ, Chris DiBona, which slammed "the charlatans" peddling antivirus apps for Android.


Comments

Comments are now closed

CSO Corporate Partners
  • f5
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

SECURE Email Gateway

Clearswift SECURE Email Gateway is an effective and resilient email gateway for 50 to 50,000 users.

Security Awareness Tip
Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.