Malware apps within the Android Market have been a long running issue for Google’s massively popular mobile operating system, with new threats popping up all the time. Well, in an effort to ease and potentially put a stop to this ever-growing threat, Google has introduced Bouncer.
Bouncer is essentially a program on Google’s end that automatically scans applications for malicious code that could possibly contain malware, trojans and more. Since the program is done on Google’s side of the computer (so to speak), this won’t disrupt the experience for users or make developers submit an application for approval.
Hiroshi Lockheimer, VP of Engineering on Android says it best in the Google Mobile Blog’s posting about Bouncer:
The service performs a set of analyses on new applications, applications already in Android Market, and developer accounts. Here’s how it works: once an application is uploaded, the service immediately starts analyzing it for known malware, spyware and trojans. It also looks for behaviors that indicate an application might be misbehaving, and compares it against previously analyzed apps to detect possible red flags. We actually run every application on Google’s cloud infrastructure and simulate how it will run on an Android device to look for hidden, malicious behavior. We also analyze new developer accounts to help prevent malicious and repeat-offending developers from coming back.
The service is more than welcome but it’s something that should have been implemented since day one. Lockheimer further explains the already in-place services to that make malware less of a threat on the OS.
- Sandboxing: The Android platform uses a technique called “sandboxing” to put virtual walls between applications and other software on the device. So, if you download a malicious application, it can’t access data on other parts of your phone and its potential harm is drastically limited.
- Permissions: Android provides a permission system to help you understand the capabilities of the apps you install, and manage your own preferences. That way, if you see a game unnecessarily requests permission to send SMS, for example, you don’t need to install it.
- Malware removal: Android is designed to prevent malware from modifying the platform or hiding from you, so it can be easily removed if your device is affected. Android Market also has the capability of remotely removing malware from your phone or tablet, if required.
Also mentioned in the blog post is that Android malware has been decreasing, which not many take notice of. Having less malware isn’t much of a headline but when malware is found, heads turn. While malware applications are increasing day by day, comparing the first and second halves of last year show a 40% decrease in downloaded malware applications. Applications from Lookout, Norton, and Avast! are part due to this decrease, Google is attempting to make malware harder to get into the Android Market and harder for developers with malicious intent from getting a developer account.
The most recent incident concerning spoiled applications in the Android Market was from a Symantec that claimed that up to 5 million people were victim to malware applications. Well, that didn’t actually turn out to be true and Android.Counterclank actually isn’t malware at all but a tag from a SDK that helps developers monetize their applications. Still, while it wasn’t malware, it was very much crapware.
Hit the link below to read the rest of the blog post. Hopefully Bouncer will add another layer of security to put a stop to the bastards that want to mess with your phone.
[Via: GoogleMobileBlog, picture]