Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.
06-28-2011, 08:29 PM #1
iOS More Secure Than Android Says Symantec
Mobile security is a hot issue these days as phones become increasingly more connected to the internet, social networks, and file-sharing protocol. One can argue about the resistance of certain mobile platforms but do we truly know how secure our phones are? A recent 23-page document by Symantec titled "A Window Into Mobile Device Security" details how Apple and Google handle security methods for their respective mobile platfroms: iOS and Android. The study concluded that between the two, iOS was much more secure from attack types and had more security implementation build in. Symantec's analysis even made it a point to say that iOS was characterized as "fully protected" while Android has "little protection."
While conducting this study, the researchers were looking at two components:
- How well each mobile OS performed against different attack types (e.g. Web-based and Malware attacks
- What security feature implementations were in place for both mobile OS platforms.
Below are the results:
Overall, iOS topped the Android platform in every respect except in the isolation security category. Symantec's belief is that Apple's approach to App Store screening and the inner-workings of its stock applications has made iOS extremely resilient to most attacks prevalent to mobile users. It was dually noted that the platform is well designed in this regard and thus far has proven itself worthy of such praise.
Although iOS performed well in this study, there were 200 vulnerabilities found that date back all the way to 2007. The concerns found regarded administrator-level access. From the research, Symnantec found that if someone was able to gain this administrator control, almost all the data and services on the device could be accessed and viewed. A public example of an iOS related breach was the iPhoneOS.lkee worm release of 2009. However, only jailbroken devices were affected by this worm.
Despite the high ratings and praise, Symantec reminded the readers that iOS is not off the hook; there are still places of security concern that can be fixed in order to make it even more secure and less vulnerable to attacks.
As mentioned above, Android only beat the iOS mobile platform in one area: isolation in the security category. It was found that the Android platform was a much better improvement over the traditional desktop operating system security. However, Symantec mentioned that it had two major weaknesses.
Google's system of application review and distribution gives more freedom for attackers to create and infect mobile users according to the results. Also, because Android's permission system is based upon the user making most of the important security choices and settings changes, this proved to be a problem as many mobile users are unwillingly or skilled enough to understand how to control and monitor these settings.
Symantec concluded with the fact that mobile devices are somewhat of a mixed bag in terms of security. Although security frameworks are build-in, because their platforms are marketed towards a consumer market, restraints have been more loose to ensure the best usability for any mobile user on their platform.
Source(s): Symantec, AppleInsider
Last edited by Joshua Tucker; 06-28-2011 at 09:38 PM.
06-28-2011, 09:02 PM #2
I was going to post this if I didn't already see someone do so.
I'm curious to know if this is a scare from Symantec targeted towards the average electronic consumer? So that they can start selling their platform on Mobile devices, since they have lost a good amount of their market share to the free Antivirus softwares'. I wonder if this is all part of their new business plan, or if there is some worry-some truth to this?
Any programmers able to answer this?
06-28-2011, 09:08 PM #3
06-28-2011, 09:42 PM #4
Why am I not surprised? (FACEPALM)
06-28-2011, 09:46 PM #5
06-28-2011, 09:51 PM #6
06-28-2011, 10:09 PM #7
06-28-2011, 11:55 PM #8
do we have antivirus app for our iOS?
06-29-2011, 12:16 AM #9
EDIT: I just spoke with i0n1c and I was incorrect; got mixed up. He actually posted a tweet though that kind of sums up my feelings on iOS anti-virus also:
Last edited by Joshua Tucker; 06-29-2011 at 12:25 AM.
06-29-2011, 09:24 AM #10
Rooted Android and jailbroken iPhones are unsecure on pretty much the same level. How about all those people using the default alpine password for SSH. Ya, thats real secure. Symantec lost my respect many years ago and stuff like this is no more than a sales ad for some upcoming 'antivirus' software for phones.
06-29-2011, 09:29 AM #11
06-29-2011, 10:48 AM #12
i0n1c's Twitter post about antivirus is so true! On a computer it can lay low and not take too much memory without affecting performance, but for an iPhone it would be a pain and kill the battery and performance.