Collaborate Disseminate
Posted by Steve Kafka and Khawaja Shams (Android Security and Privacy Team), and Mohet Saxena (Play Trust and Safety)
A safe and trusted Google Play experience is our top priority. We leverage our SAFE (see below) principles to provide the framework … Continue reading How we fought bad apps and bad actors in 2023
Posted by Dave Kleidermacher, VP Engineering, Android Security and Privacy
Keeping people safe and their data secure and private is a top priority for Android. That is why we took our time when designing the new Find My Device, which uses a crowdso… Continue reading How we built the new Find My Device network with user security and privacy in mind
Posted by Eugene Rodionov and Ivan Lozano, Android Team
With steady improvements to Android userspace and kernel security, we have noticed an increasing interest from security researchers directed towards lower level firmware. This area has tradition… Continue reading Address Sanitizer for Bare-metal Firmware
Posted by Sarah Jacobus, Vulnerability Rewards Team
Last year, we again witnessed the power of community-driven security efforts as researchers from around the world contributed to help us identify and address thousands of vulnerabilities in our prod… Continue reading Vulnerability Reward Program: 2023 Year in Review
Posted by Eugene Liderman, Director of Mobile Security Strategy, Google
From its founding, Android has been guided by principles of openness, transparency, safety, and choice. Android gives you the freedom to choose which device best fits your needs,… Continue reading Piloting new ways of protecting Android users from financial fraud
Posted by Lars Bergstrom – Director, Android Platform Tools & Libraries and Chair of the Rust Foundation Board
Back in 2021, we announced that Google was joining the Rust Foundation. At the time, Rust was already in wide use across Android and ot… Continue reading Improving Interoperability Between Rust and C++
Posted by Sherif Hanna, Group Product Manager, Pixel Security
Helping Pixel owners upgrade to the easier, safer way to sign in
Your phone contains a lot of your personal information, from financial data to photos. Pixel phones are designed to help … Continue reading Effortlessly upgrade to Passkeys on Pixel phones with Google Password Manager
Posted by Ivan Lozano and Roger Piqueras Jover
Android’s defense-in-depth strategy applies not only to the Android OS running on the Application Processor (AP) but also the firmware that runs on devices. We particularly prioritize hardening the cellu… Continue reading Hardening cellular basebands in Android
Posted by Nataliya Stanetsky, Android Security and Privacy Team
The App Defense Alliance (ADA), an industry-leading collaboration launched by Google in 2019 dedicated to ensuring the safety of the app ecosystem, is taking a major step forward. We are… Continue reading Evolving the App Defense Alliance
Posted by Andy Qin, Irene Ang, Kostya Serebryany, Evgenii Stepanov
Since 2018, Google has partnered with ARM and collaborated with many ecosystem partners (SoCs vendors, mobile phone OEMs, etc.) to develop Memory Tagging Extension (MTE) technology. … Continue reading MTE – The promising path forward for memory safety