What's new in Android security
summary
State of Android security: Google delivers monthly patches and reports a 50% drop in PHA on Play while 60% of malware detections now use machine learning. Android P adds Android Protected Confirmation (transactions signed inside a TEE so a displayed amount can’t be altered), a new StrongBox KeyStore backed by tamper-resistant hardware, BiometricPrompt and WebAuthn (Chrome Q4) for authentication, TLS-by-default for apps targeting P, restricted background sensor access, and a lockdown mode for stronger lock‑screen guarantees.
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:56Android Security Strategy
- 4:38Installs of potentially harmful apps
- 6:19Exploit pricing
- 10:38Bigfoot Biomedical
- 11:47Duo Security
- 12:24Launch Partners
- 14:08Case study: Google Pay transit
- 14:59Why stronger key protection?
- 16:40StrongBox: additional KeyStore type
- 17:12Comparison of KeyStore types
- 18:02Set StrongBox when generating the key
- 24:00Comparing ways to gate on auth
- 24:52TLS by default: integrity of data-in-transit
- 26:25Key Attestation: to check device integrity
- 30:04More user control over data
related talks
10mThe state of Android security
39mSecurity on Android: What's next
27mSecurity & Pie
56mThe Android Security Jungle: Pitfalls, Threats & Survival Tips
53mThe Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
39mO-mg what's new in Android Security?
43mSecurity in Android Applications
32mDebunking Android Security Myths with Data