Security on Android: What's next
summary
Android Q adds concrete defenses and developer tools: Adiantum disk encryption gives fast, CPU-only full-disk encryption on low-end ARM and is merged into Linux 5.0; Project Mayline lets Google push fixes for media/Conscrypt; TLS 1.3 is enabled by default; Jetpack Security Library (alpha) handles file/shared pref encryption on Android 6+; Google Play offers key upgrade for new installs; BiometricPrompt adds implicit confirmation plus PIN fallback; FIDO2/WebAuthn support and using an Android phone as a security key; Identity Credential API and Direct Access for offline NFC; Strongbox/Titan M attestation and vbmeta-measured attestation combat insider firmware attacks.
AI-written summary · about
chapters (27)
- 0:00Intro
- 3:30Privacy
- 4:20Updateability
- 5:25Hardening
- 6:45Encryption
- 7:59Adiantum
- 9:27Android Cue
- 10:43Jetpack Security Library
- 12:44Network Encryption
- 14:24Application Assigning Keys
- 15:05App Signing by Google Play
- 15:38Key Upgrade
- 17:02Key Rotation
- 17:58Before Enabling Key Rotation
- 18:50User Authentication
- 19:26Biometric Prompt
- 20:06Implicit Confirmation Flow
- 23:27Fido 2 certified
- 24:17Second factor authentication
- 26:20Physical ID
- 26:49Credentials
- 28:34Jetpack Compatibility Library
- 31:47Transparency on multiple layers
- 32:46Dynamic Code
- 36:36Knowledge Factor
- 37:26Transparency
- 38:32Thanks
related talks
39mWhat’s “Q” in Android Security
32mWhat's new in Android security
10mThe state of Android security
27mSecurity & Pie
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
43mSecurity First Android Apps
28mModern security for Android Developers
56mThe Android Security Jungle: Pitfalls, Threats & Survival Tips