Researchers find some smartphone models more vulnerable to attack

Nov 30, 2011

New research from North Carolina State University shows that some smartphones specifically designed to support the Android mobile platform have incorporated additional features that can be used by hackers to bypass Android's security features, making them more vulnerable to attack. Android has the largest share of the smartphone market in the U.S.

"Some of these pre-loaded applications, or features, are designed to make the smartphones more user-friendly, such as features that notify you of missed calls or text messages," says Dr. Xuxian Jiang, an assistant professor of at NC State and co-author of a paper describing the research. "The problem is that these pre-loaded apps are built on top of the existing Android architecture in such a way as to create potential 'backdoors' that can be used to give third-parties direct access to personal information or other phone features."

In essence, these pre-loaded apps can be easily tricked by hackers. For example, these "backdoors" can be used to record your phone calls, send text messages to premium numbers that will charge your account or even completely wipe out all of your settings.

The researchers have tested eight different models, including two "reference implementations" that were loaded only with Google's baseline Android software. "Google's reference implementations and the Motorola Droid were basically clean," Jiang says. "No real problems there."

However, five other models did not fare as well. HTC's Legend, EVO 4G and Wildfire S, Motorola's Droid X and Samsung's Epic 4G all had significant vulnerabilities – with the EVO displaying the most vulnerabilities.

The researchers notified manufacturers of the vulnerabilities as soon as they were discovered, earlier this year.

"If you have one of these phones, your best bet to protect yourself moving forward is to make sure you accept security updates from your vendor," Jiang says. "And avoid installing any apps that you don't trust completely."

Researchers now plan to test these vulnerabilities in other smartphone models and determine whether third-party firmware has similar vulnerabilities.

Explore further: Microsoft spreads Cortana abroad in Windows Phone

More information: The paper, "Systematic Detection of Capability Leaks in Stock Android Smartphones," will be presented Feb. 7, 2012, at the 19th Network and Distributed System Security Symposium in San Diego, Calif.

Related Stories

How Secure are iPhone and Android Apps

Apr 01, 2010

(PhysOrg.com) -- Today's smartphones are pocket size computers that can be customized by downloading applications. This is what makes a smartphone vulnerable to cybercriminals. In this article we will examine ...

Recommended for you

Body by smartphone

6 hours ago

We love our smartphones. Since they marched out of the corporate world and into the hands of consumers about 10 years ago, we've relied more and more on our iPhone and Android devices to organize our schedules, ...

Breakthrough elastic cloud-to cloud networking

8 hours ago

Scientists from AT&T, IBM and Applied Communication Sciences (ACS) announced a proof-of-concept technology that reduces set up times for cloud-to-cloud connectivity from days to seconds. This advance is a major step forward ...

Security CTO to detail Android Fake ID flaw at Black Hat

22 hours ago

Where have you heard this before: A team of security researchers discover a security flaw in Android devices. This is, however, news. This time, experts are talking about a flaw that involves a widespread ...

Software provides a clear overview in long documents

Jul 25, 2014

In the future, a software will help users better analyze long texts such as the documents for calls for bids, which are often more than one thousand pages long. Experts at Siemens' global research unit Corporate ...

User comments : 0