The document provides an overview of security threats and solutions for the Android operating system, highlighting market share statistics and comparing Android's security to other platforms like iOS and Blackberry. It discusses proposed solutions, including cloud-based reputation systems and OS augmentation, aimed at improving user security and awareness. Android is identified as having significant vulnerabilities, emphasizing the need for user empowerment and enhanced security measures.

1. security threat solutions
Android OS

2. Overview
● mobile context
● security challenges
● proposed solutions

3. Android
Open Handset Alliance
● Google
Open Source
● Base OS
● Application Middleware
● Java SDK
● System Application

4. Mobile
IDC: International Data Corporation
● 12/2012 Global Market Share Report
○ 68% Android OS
○ 19% Apple iOS
○ 5% RIM Blackberry OS
○ 3% MS Windows Phone
● Worldwide Quarterly Mobile Phone Tracker
○ 207.6 million units shipped 4Q12: 91.1% (APL+AND)
○ 70.2% increase from 4Q11
○ 722.4 million units shipped 2012: 87.6% (APL+AND)
○ 494.5 million units shipped 2011: 68.1% (APL+AND)

5. Market
GooglePlay
● ~700,000 applications
● 25 billion downloads
● 1.6 billion downloads/month
Apple
● ~700,000 applications
● 30 billion downloads

6. Security
iOS
● well designed
● largely resistant to attack
Windows
● ok for low level requirements
Blackberry
● considered most secure
Android
● considered least secure

7. Consumer

8. Enterprise
● Category 1: Routine
● Category 2: Important
● Category 3: Sensitive
● Category 4: Top-Secret

9. Solution
Cloud Based Reputation
● each app has unique ID
● store reputation for each app
● reputation classifications
○ good
○ unknown
○ bad
● pro: increases user awareness and power
● con: user's can't be trusted

10. Solution
OS Augmentation: Saint
● Secure Application INTeration
● governing framework
● policy enforcement
○ install-time
○ run-time
○ administrative
○ operational
● pro: integrated
● con: adoption

11. Conclusion
Android
● Largest target
● Greatest weakness
○ provenance
○ permissions
● Empower users
● OS Augmentation