Google to auto probe Android Market for malware

An answer to malware and rebuttal to calls for it to vet apps first.
  • Liam Tung (CSO Online)
  • — 03 February, 2012 22:18

Google has unveiled Bouncer, its answer to the growing threat of maliciously laced software available on the Android Market.

Bouncer will provide automated malware scanning of Android Market, but Google will not be bowing to calls for it to follow Apple in implementing an approval process for each application on its market.

Apple's mysterious vetting process is arguably one of the main reasons why there remains few if any cases of iOS malware available for download on the App Store.

However, Apple's process could also slow down the release of apps and provide obstacles to building the largest ecosystem. Security researcher Charlie Miller recently detailed some of those challenges during his efforts to bypass Apple's code signing process, which he did, landing him a one year ban from its developer program.

"Here’s how it works," Google's vice president of Android engineer, Hiroshi Lockheimer explained. "Once an application is uploaded, the service immediately starts analysing it for known malware, spyware and trojans."

It will also conduct a behavioral analysis of the app by running it in Google's cloud and comparing it against previously analysed apps to detect anything that might be considered untoward.

"We also analyse new developer accounts to help prevent malicious and repeat-offending developers from coming back," Lockheimer added.

While security vendors across the board reported a huge surge in Android malware throughout 2011, Google's own analysis showed a 40 per cent decline in "the number of potentially-malicious downloads from Android Market."

In other words, Google is saying there might be malware there, but people aren't necessarily downloading those apps.

"While it’s not possible to prevent bad people from building malware, the most important measurement is whether those bad applications are being installed from Android Market - and we know the rate is declining significantly," Lockheimer wrote, noting the drop occurred at the same time as security vendors were reporting a rise in Android malware.

Bouncer follows a controversial rant by Google open source champ, Chris DiBona, which slammed "the charlatans" peddling antivirus apps for Android.


Heartbleed: What you need to know about the security fiasco in three minutes or less

READ THIS ARTICLE
DO NOT SHOW THIS BOX AGAIN [ x ]
Comments are now closed.
CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Enterprise Security for Endpoints

Think your endpoints are secure? Think again. Learn why Trend Micro can help.

Latest Jobs
Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.