2017年Android安全回顾（英文版）_56页-2mb

Android Security 2017 Year In Review Summary

Core Content

This report outlines the significant progress made in Android security in 2017, emphasizing the platform's improvements in protecting users from potentially harmful applications (PHAs), enhancing security features, and strengthening the overall ecosystem.

Main Viewpoints

• Android Security Leadership: Android security has become a leader in the industry, with a significant reduction in PHA installations and improved exploit difficulty.
• Google Play Protect: This service has been instrumental in detecting and removing PHAs, offering real-time protection and cloud-based analysis.
• Platform-Level Security Enhancements: Android Oreo (Android 8.0) introduced major security updates, including Project Treble and Android Verified Boot 2.0.
• Open Source Advantage: The open source nature of Android allows for a large community of defenders to collaboratively identify and mitigate vulnerabilities.
• Enterprise Security Growth: Android's enterprise features, such as work profiles and managed Google Play, have seen substantial adoption and improvement.
• Collaborative Security Efforts: Google works closely with device manufacturers, carriers, and researchers to ensure a secure Android ecosystem.

Key Information

Google Play Protect

• Overview: Google Play Protect is a comprehensive security service that scans devices for PHAs and provides real-time protection.
• On-Device Capabilities:
  • PHA Scanning: Daily and on-demand scanning to detect and remove PHAs.
  • Find My Device: Helps locate lost or stolen devices.
  • Safe Browsing: Protects users from deceptive websites and phishing.
  • Developer APIs: Enables third-party apps to use Google's security services.
• Performance: In 2017, Google Play Protect reduced PHA installations by 50%, and blocked over 10 million harmful app installs through offline scanning.
• Global Reach: Enabled on over 2 billion Android 4.3+ devices with Google Play, offering real-time protection and security updates.

Android Platform Security

• Key Features:
  • Encryption: Protects data from unauthorized access.
  • Hardware-Backed Security: Enhances key storage and enables strong remote authentication.
  • Kernel Self-Protections: Mitigates memory corruption vulnerabilities and other security flaws.
  • Sandboxing: Keeps apps isolated to protect data and processing.
  • SELinux: Provides a secure definition and enforcement of security boundaries.
  • Userspace Hardening: Includes ASLR and DEP to protect against memory corruption.
  • Verified Boot: Ensures the operating system starts in a known good state.

Android 8.0 (Oreo) Security Features

• Project Treble: A major architectural change that simplifies updates and enhances security by isolating vendor-specific components.
• Android Verified Boot 2.0 (AVB): Improves security by using separate signing keys for partitions, enabling faster and more secure updates.
• Rollback Protection: Prevents attackers from reverting a partition to a vulnerable version.
• Standardization: Simplifies the boot process and reduces bootloader complexity.

Security Metrics

• PHA Reduction: The annual probability of downloading a PHA from Google Play dropped from 0.04% in 2016 to 0.02% in 2017.
• Security Checks: In 2017, Google Play Protect reviewed about 23 million new apps, a 65% increase from 2016.
• Update Coverage: The number of Android devices receiving security patches increased by over 30% in 2017.

Ecosystem and Community

• Open Source Power: The open source model allows for a vast and collaborative security community.
• Third-Party Collaboration: Google works with partners, including EMM providers, to ensure consistent and secure implementations.
• Industry Recognition: Third-party data and contests like Mobile Pwn2Own show improved security and higher exploit difficulty.

Enterprise Adoption

• Work Profile: Separates business and personal data, enhancing privacy and security for enterprises.
• Managed Google Play: A curated store for enterprise customers, with a 2000% increase in 30-day active devices in 2017.
• Verify Apps API: Helps administrators check device security status and manage PHAs.

Conclusion

In 2017, Android made substantial strides in security, with improvements in PHA detection, platform-level defenses, and ecosystem-wide protections. Google's commitment to user privacy and security, along with the collaborative efforts of the open source community and enterprise partners, has significantly enhanced the platform's safety and reliability.