• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Android Malware - How is it detected?

mossy464

Lurker
Hi,

Im currently researching Android security as part of a Masters thesis and I'm currently looking at the various AntiVirus applications available.

Firstly, I know that all android apps(including AV) run in a sandbox which isolates them from other parts of the system and this leads me to believe that AntiVirus protection is not very useful apart from the other functionality it is bundled with, i.e. remote wipe etc.

However, recent tests by av-test.org have shown that many of the current AV apps are getting better at detecting malware on Android.

http://www.av-test.org/fileadmin/pdf/avtest_2013-01_android_testreport_english.pdf

This is a major improvement from the tests run by av-test last year when most AV apps did not detect the majority of malware.

Can anyone tell me how these apps are detecting Malware when they are in the sandboxed environment. I've read conflicting information online so looking for some clarity.

Thanks :)
 
Ok, I think I have got a better idea of how they work now.

The permissions these apps require allows them to access other applications and stop them if necessary, meaning that the sandbox doesnt really matter as the app has permissions to access other parts of the system.

Is this correct?
 
Back
Top Bottom