OK, first off you use "virus" "malware" "phishing" "exploit" and "spam"
almost interchangeably. That is not a good sign from a security scanning
company. "Cloud based" is meaningless buzzword association.
Beyond that, Android uses the underlying Linux user and group model (with a
little mangling) to enforce security - the only thing on that list that
actually exists in those applications is malware. (And spam, but I doubt
your app does a better job catching it than gmail and most other providers
already do..)
Can you show an example of -any- android virus? Not malware (although that
is also rare), not a trojan (personally I'd class your app in there :) ..)
but an actual virus or worm. Something that infects a system and -spreads-
without the user having to take specific steps outside of exposure. ("Send
this to your friends?" is a trojan, not a virus, unless it can infect the
friends without their interaction. Spam doesn't count either.)
Lets look at your website, as you suggested:
"WeatherFist" is a privacy issue, not a virus. (And it does exactly what
weatherbug and others do - it gathers your location and any other
information THAT YOU GIVE IT. That makes it - at worst - a trojan. The user
must approve the permissions before installation.)
Spyware app - if it works its not a virus or trojan, since it requires
specific installation. So if it works as advertised and if you can detect
it, sure, there's a win.
Nook - ok so now its just as dangerous (and not a tiny bit more) as any
random android device with root. Except there isn't even a one-click root,
so the user has to -really- want it. And so far nobody has actually done
anything bad with root (eg trojans)
Phishing..not related to android.
More about mobile spy.. ok.. wandering off now..
I already have an app that is an antivirus. It shipped on my phone, its
pretty cool. Called "Calendar" - since I started using it, I haven't gotten
a single virus. I think its the same as the one on my old symbian s90 nokia,
but they called it "Organizer". And my toaster has one, only its called
"bagel"..
On Thu, Mar 25, 2010 at 6:02 AM, dror <[email protected]> wrote:
> We are the developers of the 'antivirus' for android , with over
> 800,000 downloads on the android Market.
>
> our antivirus is a set of security engines that protect android
> devices .
>
> Android OS & Security is in it first steps and Malware isn't here yet
> (which is good:)
>
> in this Beta stage antivirus protect against bad software packages,
> misconfigure devices, spam and hacking attempt.
>
> its scan for installed software packages , running services ,
> receivers , classes and look for black list signatures .
>
> our cloud based antivirus have a database with more then 40,000
> apps , and some of them remarks as suspicious based on internal
> research or users input ,recommendation and use habits.
>
> After antivirus detect a suspicious program its advise the user to
> uninstall it by launching the android uninstall screen and do not try
> to remove it (antivirus is not running as Root user)
>
> the scan settings looks for androids settings ( like allow install of
> non-market apps) and Unix level settings (ex: rooted device, running
> procs , network status , etc )
>
> the content scan look in user generated content like SMS , contacts ,
> bookmarks for signatures or forbidden commands hidden and detect
> Scam and Spam text messages
>
> the media scan scan media files , pictures , mp3 , videos ,play list
> and so for exploits (a security researcher already found a way to
> compromise a phone using a bad MP3 song) and black list file names ,
> and remove them in this point.
>
> Android is an Operating system for mobile phones,like any computing
> device may be infected with virus or malware (bad software)
>
> we believe that when android platform will become more popular , virus
> writes and malware publishers will start focus there efforts on our
> phones (we seen large scale phising attempts , and spammers )
>
>
> we are hoping that our product will prevent virus attacks and will
> keep our phones secure .
>
> you can visit our security center can see that kind of stuff we are
> defending against at http://www.droidsecurity.com/securitycenter.html
>
>
> Dror and the antivirus team at http://www.droidSecurity.com
>
> To unsubscribe from this group, send email to android-security-discuss+
> unsubscribegooglegroups.com or reply to this email with the words "REMOVE
> ME" as the subject.
>
To unsubscribe from this group, send email to
android-security-discuss+unsubscribegooglegroups.com or reply to this email
with the words "REMOVE ME" as the subject.
