Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

More than 290,000 Google Play Android apps pose 'high-risk' to security, says Bit9

The Android apps are considered "questionable" or "suspicious" because they could gain access to personal information to collect GPS data, phone calls or phone numbers

Article comments

One-quarter of more than 400,000 Android apps examined in the Google Play store pose security risks to mobile-device users, according to new research.

Security vendor Bit9 categorised these Android apps as "questionable" or "suspicious" because they could gain access to personal information to collect GPS data, phone calls or phone numbers and much more after the user granted "permission" to the app. "You have to say 'yes' to the application or it won't run," pointed out Harry Sverdlove, Bit9 CTO. Games, entertainment and wallpaper apps especially seem to want to grab data, even though the their functions would seem to have little direct use for it.

Bit9 notes this doesn't mean these apps are malware per se, but they could do damage if compromised because the user has granted so much permission.

There are said to be about 600,000 apps in Google Play, and Sverdlove says Bit9 is now compiling a "reputation" database of Android apps. The firm is also going to move on to other app stores, including those from Apple and Amazon, in order to create mobile security products that can protect users based on risk-scoring of apps. 

Reputation-based approaches have become commonly used throughout the security industry for protecting Web users, for example, against malware-infested sites, and now there's interest in applying similar ideas to analyzing risk associated with mobile apps.

Broken down, Bit9 categorised these "questionable" and "suspicious" apps it found in Google Play this way:

  • 42 percent access GPS location data, and these include wallpapers, games and utilities

  • 31 percent access phone calls or phone numbers

  • 26 percent access personal data, such as contacts and email

  • 9 percent use permissions that can cost the user money

In its report, Bit9 describes its methodology as crawling Google Play to collect detailed information about 412,000 mobile apps, including publisher, popularity, user rating, category, number of downloads, requested permissions and price.

Of the 412,222 Android apps evaluated from Google Play, Bit9 says more than 290,000 of them access at least one high-risk permission, 86,000 access five or more and 8,000 apps access 10 or more permissions "flagged as potentially dangerous." It defined risk level according to relative degrees of privacy intrusion and the app's feature set, perhaps the ability to wipe devices or change systems settings.

The study also included a survey of 138 IT professionals responsible for mobile security for over 400,000 users in their organisations. It found:

  • 78 percent think phone makers do not focus enough on security, but 71 percent allow employee-owned devices to access their organisation's network.

  • Only 24 percent deploy some form of app monitoring or control to grant visibility into employees' devices.

  • 84 percent feel Apple iOS is "more secure" than Android and 93 percent of respondents allow iOS to access their network. Only 77 percent allow Android devices, and in something of a surprise, 13 percent say they allow rooted Android or "jailbroken" iPhone devices onto their networks.

  • 96 percent allowing personal devices also allow employees to access email using the device, while 85 percent allow access to company calendar data.

The potential for trouble in all this, according to Bit9, is that apps that can access all this user data could become the open door for hackers to exploit in the future.



Share:

More from Techworld

More relevant IT news

Comments

Saif said: Apple doesnt even allow users to see permissions thanks to Android we can at least see them I see lots of apps with crazy permissions Google should do something



Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *