Zerosecurity
  • Home
  • Security
    • Exploits
    • Mobile Security
  • Malware
  • Data Breaches
  • Crypto
  • Privacy
  • Downloads
    • Malwarebytes
    • Exploits
    • Paper Downloads
    • Software & Service Reviews
No Result
View All Result
SUBSCRIBE
Zerosecurity
  • Home
  • Security
    • Exploits
    • Mobile Security
  • Malware
  • Data Breaches
  • Crypto
  • Privacy
  • Downloads
    • Malwarebytes
    • Exploits
    • Paper Downloads
    • Software & Service Reviews
No Result
View All Result
Zerosecurity
No Result
View All Result
Home Mobile Security

Android is getting firmware level security improvements

Google is finally making improvements to Android's security by apply hardening updates at the firmware level

Paul Anderson by Paul Anderson
February 22, 2023
in Mobile Security
0
google hardens android kernal
7
SHARES
539
VIEWS
Share on FacebookShare on Twitter

Android is the most widely used mobile operating system in the world, but it is also the most challenging to protect against evolving security threats. Google is working to improve Android’s security by implementing firmware-level security features, which may come with a performance cost.

You might also like

New iOS and iPadOS update pushed to fix zero-day bugs

Are Bluetooth signals being used to track smartphones?

How Apple Stopped $1.5 billion Worth of Fraudulent Transactions in 2021

Google is aiming to enhance the security of its Android operating system by reinforcing it at the hardware level. This aligns with the current trend of securing less visible components of the software stack to add more layers of protection against modern cyber threats.

All Android devices run on Systems-on-Chip (SoCs), which consists of multi-core processors, including application processors, specialized processors for images, video, security, and cellular communication, and are governed by firmware. Malicious actors are increasingly targeting this part of the software stack by finding vulnerabilities that can be exploited remotely, which is a significant concern for companies like Google, which coordinates with a large number of OEM partners to distribute security fixes quickly and efficiently.

kernel in android

Google has a multi-faceted approach to improving Android’s security. Firstly, it intends to introduce a protection mechanism in the form of compiler-based sanitizers that can detect memory safety issues early in the software development process.

Secondly, Google plans to collaborate with hardware partners to include memory safety features at the firmware level. These features will prevent any critical memory errors and include a mechanism that deletes memory pages before they can be allocated by an app. This ensures that random data left behind by a different app is entirely erased.

Lastly, the company will incorporate a series of mitigations designed to make it more challenging for hackers to exploit unknown bugs. One drawback of these mitigations is that they may reduce performance, as not all parts of an SoC have the same resources. Google acknowledges that striking a balance between performance and security will be a challenge moving forward but emphasizes that optimizations can be made.

The fragmentation of the Android ecosystem remains one of Google’s most significant security concerns. Although the company has made considerable efforts to write almost all new code for Android versions 12 and higher in memory-safe languages like Rust, user adoption has been relatively slow. Additionally, malware creators can easily bypass Android security measures using stolen Platform certificates.

Tags: androidgoogle
Share13Tweet8
Paul Anderson

Paul Anderson

Editor and chief at ZeroSecurity. Expertise includes programming, malware analysis, and penetration testing. If you would like to write for ZeroSecurity, please click "Contact us" at the top of the page.

Recommended For You

New iOS and iPadOS update pushed to fix zero-day bugs

by Kyle
February 17, 2023 - Updated on February 19, 2023
0
New iOS and iPadOS update pushed to fix zero-day bugs

Cybercriminals and "commercial" spyware developers frequently target iOS devices to carry out surveillance operations, data theft, and other nefarious actions. By identifying a weakness in Apple's iOS WebKit,...

Read more

Are Bluetooth signals being used to track smartphones?

by Christi Rogalski
June 17, 2022
0
Bluetooth research leads to tracking

Can Bluetooth signals be used to track smartphones? Many people would say "No" to this question. However, a team of engineers at the University of California San Diego...

Read more

How Apple Stopped $1.5 billion Worth of Fraudulent Transactions in 2021

by Christi Rogalski
June 8, 2022
0
Apple app store security fraud

Apple has recently released statistics on the number of fraudulent and untrustworthy transactions that have passed through the Apple App Store in 2021. In combination, they have stopped...

Read more

SharkBot – A New Generation Android Banking Trojan

by Kyle
May 27, 2022 - Updated on May 31, 2022
0
SharkBot Android Banking Malware

SharkBot is a "newer" Android banking trojan found recently being distributed on the Google Play Store. The trojan was originally found in October of 2021 by the Cleafy...

Read more

Silent OS 3.0 for Blackphone Completely revamped

by Paul Anderson
July 24, 2016 - Updated on May 17, 2022
1
Silent OS 3.0 for Blackphone Completely revamped

Version 3.0 migrates Silent OS to Android Marshmallow 6.0.1 and delivers the Android safety patch level to June 2016. Along with fixes for security vulnerabilities, Silent OS 3.0...

Read more
Next Post
$1 Million+ USD stolen from Algorand users

$1 Million+ USD stolen from Algorand users

Related News

BreachForums Owner Arrested and Charged

BreachForums Owner Arrested and Charged

March 17, 2023
ChipMixer platform tied to crypto laundering scheme – seized by authorities

ChipMixer platform tied to crypto laundering scheme – seized by authorities

March 17, 2023
NSA intercepting U.S. Routers

NSA intercepting U.S. Routers

June 6, 2014 - Updated on March 17, 2023
Zerosecurity

We cover the latest in Information Security & Blockchain news, as well as threat trends targeting both sectors.

Categories

  • Crypto
  • Data Breaches
  • DotNet Framework
  • Downloads
  • Exploits
  • Exploits
  • Information
  • Legal
  • Malware
  • Malware Analysis
  • Mobile Security
  • Paper Downloads
  • Piracy
  • Privacy
  • Programming
  • Public
  • Security
  • Security
  • Software & Service Reviews
  • Technology News
  • Tools
  • Tutorials
  • Video Tutorials
  • Whitepapers
  • Zero Security
  • Contact Us
  • List of our Writers

© 2022 ZeroSecurity, All Rights Reserved.

No Result
View All Result
  • Home
  • Security
  • Exploits
  • Data Breaches
  • Malware
  • Privacy
  • Mobile Security
  • Tools
  • Contact Us
  • Privacy Policy

© 2022 ZeroSecurity, All Rights Reserved.