Supreme Member

Yours by design

Rank: 7Rank: 7Rank: 7

Credits
23185
Device
Mi A1
Online time
791 Hours
Send PM

Mi BoxMi WiFi Router MiniMi Portable WiFiMi Power BankXiaomi 6 LaunchMi In-Ear HeadphonesMi BandMi KeyAwesome!FlashholicI Love MIUIMIUI 2015MIUI 7MIUI Devices ContestMIUI 6MIUI 8Fantastic!MIUI 2016Redmi Note 3Mi 4iRedmi 3Mi PadMi Note ProMi 3Mi TVRedmi 1SMi 1Mi NoteRedmi 2Mi 2Xiaomi Mi 4Redmi Note 2Redmi NoteRedmiMIUI Fan from Turkey2014 ChristmasMIUI Fan From SingaporeMid-Autumn Festival1st AnniversaryFan Of MIUI IndiaMIUI V5 ReviewMIUI Fan From IndonesiaSingapore BirthdayMIUI 4th AnniversaryHappy DiwaliDiwali Happy Singles' DayThanksgiving DayAtaturk Mourning300K Forum MembersFan Of MIUI Ex-Yu MIUI Fan from MalaysiaMIUI 50 Million UsersHappy New YearMIUI World Tour2100K Forum Members1 Million Forum App InstallsMIUI Fan from IndiaHappy Valentine's DayOlympics MedalMIUI 6th AnniversaryMIUI Forum AppMerry Christmas3 Million Forum App InstallsMIUI 9MIUI 7th AnniversaryHilal Ramadan 3500K Forum MembersMIUI 2017Surge S110 Million Forum Posts3 Million Forum MembersPokemon Master Medal1500K Forum MembersFan Of MIUI Bangladesh1300K Forum Members700K Forum MembersMIUI Fan From BrazilXiaomi 5th AnniversaryMIUI 100 Million Users500K Forum MembersMIUI 5th Anniversary600K Forum Members1 Million Forum MembersMIUI Fan From PhilippinesXiaomi 6th Anniversary5 Million Forum Posts900K Forum Members800K Forum MembersAlpaca Mi Bunny I Love Mi BunnySummer Mi BunnyMiPopGamer Mi BunnyMIUI Device TeamMIUI News TeamMIUI ExpertApp StarMIUI 8th AnniversaryMr. Post the MostMIUI Medals CollectorMIUI Android 4.4 KitKatAndroid GuruMIUI FB FollowerMIUI Global Forum 2014Mi Bunny Game Master 2017 Annual AwardsForum Contest LoverMIUI Resources TeamRedmi Quiz MasterAndroid ElfMi TalentRingtone ExpertTechnology GuruApp TalentMi Lover MedalDebate MasterMIUI FollowerInbox ZeroHumor MasterMost Active MIUIerMIUI Ice Bucket ChallengeOTA FeedbackPioneer of MIUI English Forum Die-hard MIUI FanIndustrious ReporterRingtone Star Youth PledgeUpdates LoverStar Of IconsRingtone Master

[Android] The State of Antivirus for Android ( Do you worry? )

[ Promote]
3853 21 |
10:11, Sep-15-2014 | From PC
|
|
Go to reply no.
This post was edited by sianman at 10:13, Sep-15-2014


1.jpg


Over 80% of smartphones today run Android. With such a large amount of phones using Google’s operating system, Android has become an ever more viable target for malware developers. The question is, are currently used antiviruses effective? The answer is more complex than yes or no, but is leaning ever closer to the latter.

Android as a platform has been a lucrative target since it started to gain more popularity amongst users. In 2010 one of Android’s first incidences of malware, the trojan SMS malware Fakeplayer, began exploiting Android users by sending text messages to premium numbers while the hacker received funds from the resulting charge. Users again were hit by a major attack when DroidDream made its debut on Google’s app store in 2011 and attempted to mass infect users with a root exploit by uploading applications infected by the malware.

The number of antivirus applications on the Google Play Store number in the hundreds, but only the top dozen or so have any meaningful market penetration. The top downloaded antiviruses such as Avast, AVG, or Norton boast claims of protecting wholly against malware, phishing attacks, virus removal/scanners, and much more.

We will be discussing the kind of malware commonly used against Android devices and how Android deals with such threats. How well do commonly used antiviruses truly do against these malicious programs?

The main source of testing information for this article comes from a report by Fraunhofer AISEC, a German security company that primarily deals with developing security technologies. Published in 2013, the report investigates the threat of malware on Android devices through real-world conditions instead of the typical detection tests used by other organizations such as AV-TEST. AISEC clearly states that you cannot use the same method to detect malware as you do on a platform like Windows, so in this report they decide to use an in-house method to uniquely test the most commonly used antiviruses.

How Android antivirus applications work?

Before we discuss the results of AISEC’s tests, let’s see how Android’s antivirus apps work.

Android can become infected with malicious software that can steal your data, erase critical files, or worse. For an antivirus program, its duty is to detect, isolate, and eliminate malware from the system. Detection is the key to any successful antivirus program, and certain factors inherent to the Android operating system actually make antivirus programs a mixed bag when trying to perform its tasks.

The Android operating system deals with software packages by sandboxing them; this does not allow applications to list the directory contents of other apps to keep the system safe. By not allowing the antivirus to list the directories of other apps after installation, applications that show no inherent suspicious behavior when downloaded are cleared as safe. If then later on parts of the app are activated that turn out to be malicious, the antivirus will have no way to know since it is inside the app and out of the antivirus’ jurisdiction.

Due to the sandboxed nature of Android’s app ecosystem, according to the AISEC’s report, “Android antivirus cannot monitor dynamic behavior of other apps and working directories’ contents, antivirus software is completely oblivious to such activities.” Therefore, it is very difficult for antiviruses to get the full coverage that is typically needed to be truly effective.

There are multiple vectors of attack on an Android device, and most of them are typically covered by Google’s Bouncer malware detection system. This service scans every app that is uploaded to the Play Store for malware infestation, although rarely, due to complexity in the Android operating system, some malicious apps manage to make it through.

Google’s Bouncer service attempts to eliminate the majority of obvious malware on the Play Store by testing applications in Google’s cloud infrastructure. When Google activated this service, the rates of malware in the app store decreased40% between the first and second quarters of 2011.

Malware writers found a relatively simple way to avoid Bouncer altogether. A seemingly innocuous app using the ‘dropper’ technique can download malicious software after it is installed on the target phone. Using this technique renders almost all antivirus applications useless since the inherent Android feature of sandboxing rejects the antivirus’ ability to read the contents of other apps. This therefore allows the malware to get away with harming your Android system and stealing personal data.

Another popular attack vector is repackaged apps, which are commonly found on third party app stores that do not benefit from Google’s Bouncer system. Some of these third party app stores often feature malware laced apps disguised to appear legitimate. Rooting your device can further expose it to malware designed to look for root access to all parts of the OS.   These are just a few of the challenges faced by AV apps. With this in mind, let’s see how effective they really are.

AISEC’s findings
The tests done by AISEC shows that the majority of the antivirus apps that were tested scored abysmally in detecting unaltered malware, altered root exploits, dropper downloads, root exploits at runtime, and unknown malware. The only cases where most antiviruses was remotely effective were the tests involving unaltered root exploits and unaltered malware. Out of the six cases that were used, two entire cases yielded results that showed that all antiviruses had failed to detect any threat.

Some of the virus families that were used include ZitMo, Gingermaster, Plankton, JiFake, and others. These viruses were chosen based on variety and popularity.

2.jpg
3.jpg
4.jpg

According to AISEC, these tests showed that, “the tested antivirus apps do not provide protection against customized malware or targeted attacks.” That means that, if somebody were to deliberately target a user and had the capacity to slightly alter the malware source code, the chances that the device would be compromised would be very high, regardless of antivirus usage.   AISEC also states that even minor changes to small, nonessential parts of malware can easily evade detection by the leading brand of antivirus. If the malware that is deployed is not 100% identical to the list the antivirus detects against, there is a strong chance it will not even be detected at all.

On top of that, according to AISEC, “the tested antivirus apps were also not able to detect malware which is completely unknown to date but does not make any efforts to hide its malignity.” Most antiviruses do not even attempt to detect suspicious behaviour of unknown malicious applications.

What can Google do to help?
5.jpg

There are some things that Google could do to help alleviate the risk of accidentally installing malware applications. Countermeasures such as offloading malware scanning to the cloud (a more advanced version of Google’s Bouncer solution) and stricter controls on native code execution.

The authors of the report conclude that “users and administrators should not solely rely on antivirus software for malware protection.” In the end, common sense and critical thinking can probably provide more help at avoiding malicious software. Also important is to try and avoid third party app stores, which lack the protection offered by Google’s app scanning service and are usually rife with malware and spyware. The antivirus with the highest detection rate happened to be Lookout, which based on these test results, would be the top recommended antivirus for Android users.

Although AISEC says that its tests should not be taken as the end all to the question of antivirus effectiveness, it is not hard to see why there needs to be a more proactive solution to an ever increasing problem. Are these antiviruses such as AVG, Norton, and Avast effective against malware? For the majority of infections, the answer is sadly no. If your phone is infected by any malware that is not already known by these companies, or if the previously known malware is altered in any way, it will be very difficult not only to rid yourself of the virus, but even to detect it in some cases.

Share your views!

Single-option Poll, 141 members voted
52.48% 74
29.08% 41
18.44% 26
Your User group have no permission to vote
Favorite3 Share

Rated by 2 people   Experience Reason  

1586063266 + 1 Great!
gingeerAja + 1 Fantastic!

Experience +2  View Rating Log

Platinum Member

Rank: 4

Credits
4532
Device
Redmi 4
Online time
241 Hours
Send PM

Mi Power BankMi BandMi BoxMi  BunnyI Love MIUIMIUI 6Awesome!RedmiXiaomi Mi 4Mi 3MIUI Fan from India300K Forum MembersMIUI 4th AnniversaryDiwali Fan Of MIUI India1st AnniversaryHappy Diwali600K Forum MembersHilal Ramadan 700K Forum Members800K Forum MembersSummer Mi BunnyI Love Mi BunnyAlpaca Mi Bunny Debate MasterScroll Of WisdomStar Of IconsInbox ZeroMIUI Global Forum 2014MIUI Twitter FollowerDie-hard MIUI FanMIUI Medals CollectorAndroid GuruForum Contest LoverMost Active MIUIer

13:52, Sep-15-2014 | From PC
|
I am not worried because I install apps always from the trusted sources.
Current - Samsung Galaxy Note 4, Redmi 2 Prime
Previous - Mi4, Mi 4i, Redmi Note 4G, Redmi 1S, Mi3, Lumia 640 XL, Lumia 625, Samsung S Duos 7562, Lumia 710

Tablets (latest to oldest)
iBall WQ32, Lenovo K3011 (Windows), Milagrow (Android)

Platinum Member

Rank: 4

Credits
3667
Device
Mi 4
Online time
317 Hours
Send PM

Mi KeyMi BoxMi In-Ear HeadphonesMi BandFantastic!Awesome!MIUI 6MIUI 2015FlashholicI Love MIUIMIUI 8MIUI 7Mi 3Xiaomi Mi 4Mi PadRedmi NoteRedmi Note 2Redmi 2RedmiMi 1Mi TVMi 4iMIUI Fan From Indonesia1st Anniversary700K Forum Members300K Forum MembersFan Of MIUI Ex-Yu MIUI V5 Review900K Forum MembersMIUI 4th AnniversaryHappy DiwaliDiwali Ataturk MourningHilal Ramadan MIUI Fan from IndiaMIUI Fan From SingaporeMIUI 50 Million UsersMerry ChristmasMIUI Fan From PhilippinesMIUI Fan from Malaysia800K Forum MembersXiaomi 5th AnniversaryFan Of  MIUI AzerbaijanHappy Singles' DayMIUI Fan from TurkeyMIUI 100 Million UsersThanksgiving DayFan Of MIUI BangladeshSurge S1500K Forum Members2014 ChristmasFan Of MIUI IndiaGamer Mi BunnySummer Mi BunnyI Love Mi BunnyAlpaca Mi Bunny MIUI Beta TeamScroll Of WisdomInbox ZeroYouth PledgeMIUI Twitter FollowerDebate MasterAndroid ElfMi TalentMaster Of TechnologyStar Of IconsRedmi Quiz MasterOTA FeedbackDie-hard MIUI FanUpdates LoverPioneer of MIUI English Forum Android GuruMIUI FollowerMIUI Global Forum 2014MIUI Android 4.4 KitKatHumor MasterMIUI FB FollowerForum Contest LoverMIUI Medals CollectorMost Active MIUIer

01:21, Sep-17-2014 | From PC
|
This post was edited by Pbhardwaj at 01:23, Sep-17-2014

Privacy issue is there with every single thing which is connected to internet and we must do all the necessary steps to overcome it.

Diamond Member

Rank: 5Rank: 5

Credits
654
Device
Redmi Note 3
Online time
74 Hours
Send PM
01:48, Sep-17-2014 | From PC
|
the test stated that eset is the best antivirus available, am i right ?

Elite Member

Rank: 6Rank: 6

Credits
6385
Device
Redmi Note 3
Online time
240 Hours
Send PM

Mi Power BankMi BandMi In-Ear HeadphonesMi WiFi RouterMi KeyMIUI 2015Awesome!MIUI 6I Love MIUIMIUI 7FlashholicMIUI 2016Mi PadMi TVRedmiXiaomi Mi 4Mi 3Redmi NoteMi 4cMi 4iHappy Diwali700K Forum Members300K Forum MembersMIUI Fan from IndiaMIUI 4th AnniversaryDiwali MIUI Fan From IndonesiaMIUI 100 Million UsersMIUI Fan From SingaporeFan Of MIUI Ex-Yu 1st AnniversaryMIUI Fan From PhilippinesHappy Singles' DayFan Of MIUI IndiaMIUI 50 Million UsersXiaomi 6th Anniversary2014 ChristmasXiaomi 5th Anniversary800K Forum MembersFan Of  MIUI AzerbaijanHappy New YearHappy Valentine's DayMIUI Fan from Malaysia500K Forum MembersThanksgiving DayGamer Mi BunnyAlpaca Mi Bunny I Love Mi BunnySummer Mi BunnyMIUI Beta TeamMIUI Medals CollectorMIUI Weekly Devices QuizDebate MasterOTA FeedbackMIUI Twitter FollowerMi TalentAndroid GuruMIUI FollowerStar WarsMIUI Android 4.4 KitKatPioneer of MIUI English Forum Star Of IconsMIUI Translation ContributorForum Contest LoverInbox ZeroMIUI Global Forum 2014Mi Bunny Game Master MIUI FB FollowerAndroid ElfXiaomi 8th AnniversaryYouth PledgeHumor MasterMIUI Designer TeamMost Active MIUIerDie-hard MIUI FanMaster Of TechnologyUpdates LoverScroll Of Wisdom

04:17, Sep-19-2014 | From PC
|
yes.. i worried...
Be United!!!!

Platinum Member

Rank: 4

Credits
2023
Device
Others
Online time
47 Hours
Send PM

Mi In-Ear HeadphonesI Love MIUIAwesome!MIUI V5 ReviewFan Of MIUI India100k Forum MembersMIUI Fan from IndiaMIUI 50 Million UsersMIUI 4th AnniversaryHilal Ramadan Diwali Alpaca Mi Bunny Summer Mi BunnyI Love Mi BunnyPioneer of MIUI English Forum MIUI FollowerDie-hard MIUI FanAndroid GuruOTA Feedback

16:41, Sep-30-2014 | From PC
|
2.  No, I am not worried!

Platinum Member

Rank: 4

Credits
2734
Device
Redmi 1S
Online time
58 Hours
Send PM

Mi BoxMi KeyMi In-Ear HeadphonesMi BandFantastic!I Love MIUIMIUI 2015Awesome!MIUI 6Xiaomi Mi 4RedmiRedmi NoteMi Note300K Forum MembersHappy DiwaliMIUI Fan From PhilippinesThanksgiving DayAtaturk MourningMIUI Fan from MalaysiaHappy Singles' DayMIUI Fan from TurkeyFan Of MIUI IndiaHappy Valentine's DayMIUI 100 Million Users500K Forum MembersMIUI Fan From IndonesiaFan Of MIUI BangladeshMIUI Fan From SingaporeMIUI Fan From BrazilMIUI 4th Anniversary2014 ChristmasAlpaca Mi Bunny I Love Mi BunnyGamer Mi BunnyMost Active MIUIerRedmi Quiz MasterForum Contest LoverMIUI Global Forum 2014MIUI FollowerAndroid GuruMIUI Android 4.4 KitKatYouth PledgeInbox ZeroDie-hard MIUI Fan

15:53, Oct-14-2014 | From PC
|
Malwares become more aggressive lately especially adware

MIUI Honorary Moderator

❤ Xiaomi 4

Rank: 6Rank: 6

Credits
39210
Device
Mi 4
Online time
1101 Hours
Send PM

Mi WiFi RouterMi Power BankMi KeyMi BandMi BoxMi In-Ear HeadphonesFantastic!I Love MIUIFlashholicAwesome!MIUI 6MIUI 2015Mi 3Xiaomi Mi 4Mi 1Redmi NoteMi 2Mi TVRedmiHappy DiwaliMIUI Fan From PhilippinesFan Of MIUI Ex-Yu 1st Anniversary300K Forum MembersMIUI Fan From IndonesiaFan Of MIUI IndiaMIUI 50 Million UsersMIUI 4th AnniversaryDiwali Singapore BirthdayFan Of MIUI BangladeshMIUI Fan From Singapore2014 ChristmasHappy Valentine's DayMIUI 100 Million UsersXiaomi 5th Anniversary500K Forum MembersMIUI Fan from IndiaMIUI Fan from TurkeyHappy Singles' DayMIUI Fan from MalaysiaAtaturk MourningMIUI V5 ReviewThanksgiving DayI Love Mi BunnyGamer Mi BunnyAlpaca Mi Bunny Summer Mi BunnyOTA FeedbackPioneer of MIUI English Forum Android GuruMIUI FollowerMIUI Medals CollectorMIUI Ice Bucket ChallengeStar Of IconsWallpaper TalentForum Contest LoverWallpaper StarGolden Idea CreatorMIUI FB FollowerMIUI Global Forum 2014Android ElfSuper ModeratorWallpaper ExpertApp StarMIUI Android 4.4 KitKatMIUI Resources TeamDie-hard MIUI FanMost Active MIUIerHumor MasterUpdates LoverRingtone Star Inbox ZeroYouth Pledge

22:17, Oct-29-2014 | From PC
|
Do we really need antivirus in mobile phone? I never use any antivirus before.

Platinum Member

Behind every broken heart ther

Rank: 4

Credits
3696
Device
Redmi Note 3G
Online time
167 Hours
Send PM

Mi BandMi  BunnyMi Power BankMIUI 7Awesome!FlashholicMIUI 6Fantastic!MIUI 8MIUI 2015I Love MIUIMi PadMi Note ProRedmi 2Mi 4iMi NoteXiaomi Mi 4Redmi Note 2Mi 4cRedmi NoteMIUI Fan From BrazilMIUI 6th Anniversary500K Forum MembersFan Of MIUI Bangladesh600K Forum MembersMIUI Fan from MalaysiaHilal Ramadan MIUI Fan From Singapore800K Forum MembersMIUI 100 Million UsersFan Of MIUI IndiaMIUI Fan from IndiaHappy Valentine's Day900K Forum Members700K Forum Members1 Million Forum MembersThanksgiving DayMIUI 5th AnniversaryGamer Mi BunnyAlpaca Mi Bunny Summer Mi BunnyI Love Mi BunnyMIUI Beta TeamMIUI FB FollowerScroll Of WisdomHumor MasterRingtone Star Inbox ZeroAndroid GuruMIUI Android 4.4 KitKatDie-hard MIUI FanMi Bunny Game Master Android ElfForum Contest LoverDebate MasterMIUI Medals CollectorMi Talent

17:04, Mar-17-2015 | Via mobile
|
i am worried .... : (

Platinum Member

Rank: 4

Credits
2949
Device
Redmi 1S
Online time
65 Hours
Send PM

Mi Power BankMIUI 6MIUI 7I Love MIUIAwesome!Xiaomi Mi 4Redmi 1SMIUI Lucky FridayMIUI Fan from MalaysiaMIUI Fan from IndiaHappy Valentine's Day700K Forum MembersMIUI 5th AnniversaryMIUI Fan From SingaporeI Love Mi BunnyMIUI Beta TeamMIUI FollowerMIUI FB FollowerMIUI Twitter FollowerAndroid GuruMi Lover MedalMi TalentMIUI Medals CollectorForum Contest Lover

21:45, Apr-01-2015 | From PC
|
50 - 50
Work To Learn, Never Work for Money
joinwitraj | nedunal | fireworks store

Credits Management

Quick Reply Top Return to the list