Online news senior slams Android – and its users – for sloppy security

Rich Jaroslovsky has also accused "clueless Android users” of turning their portable devices into enticing targets due to a failure to install security software on the smartphones and tablets.

In a hard-hitting opinion on the Bloomberg newswire where he is a columnist, Jaroslovsky cites research from Symantec that notes Android provides significantly less protection against malicious software than Apple's iOS devices - and Intel's McAfee operation said in July that Android has now become the most-targeted platform for malware.

The problem, he says, stems from the open source approach of Android: “the same open approach that has helped Android leap into a dominant position among mobile-device operating systems also makes it the most attractive - and easiest - target for malefactors”, he notes.

Android users, he goes on to say, take insufficient steps to reduce their vulnerability not only to penile enhancement ads but to theft of confidential information, e-mail addresses and other files they thought were secure.

“As a general rule, mobile devices - which have been designed from the ground up with connectivity in mind - are more secure than personal computers, which were well-established before the age of the internet. Research In Motion, for one, built its BlackBerry business on a security system beloved of corporate information-technology managers. It’s so robust that RIM has taken flak from foreign governments”, he says in his column.

So what is the solution?

Jaroslovsky says that the Android Market is now full of security apps, many of them free, that provide at least a basic layer of protection.

“Most of these will scan newly downloaded apps for viruses and spyware. Many also offer paid versions with additional features, such as the ability to remotely erase your phone if it goes missing”, he says, adding that one of the best-known names is Symantec, with its Norton Mobile Security Lite.

The free version, he notes, can scan not just a phone, but any SD card you might insert. It also lets you remotely lock your phone if it’s lost or stolen. A $30-a-year subscription service adds remote locate-and-wipe abilities.

“Another popular choice is Lookout Mobile Security, from Lookout Inc., which in its free version not only lets you pinpoint a phone’s location, but also order it to emit a loud alarm even if it’s on silent. Another option is AVG Antivirus, a new version of DroidSecurity, one of the most popular Android security apps, which AVG Technologies acquired last year”, he says.

The security problem with Android, however, is not going to go away, as Jaroslovsky asserts that it is too easy to create malware for the platform.

Moreover, he says, there are many sources for Android apps besides Google’s market, with no assurance that what you may find has been vetted. Juniper Networks, he adds, has estimated there has been 400% increase in Android malware since the summer of 2010.

“If you think that’s bad, remember this: Every new use to which we put our gadgets makes them even more attractive targets. Just imagine the opportunities for mischief as we start using them for payments”, he concludes.

What’s hot on Infosecurity Magazine?