Collaborate Disseminate
Posted by Ivan Lozano and Roger Piqueras Jover
Android’s defense-in-depth strategy applies not only to the Android OS running on the Application Processor (AP) but also the firmware that runs on devices. We particularly prioritize hardening the cellu… Continue reading Hardening cellular basebands in Android
Posted by Nataliya Stanetsky, Android Security and Privacy Team
The App Defense Alliance (ADA), an industry-leading collaboration launched by Google in 2019 dedicated to ensuring the safety of the app ecosystem, is taking a major step forward. We are… Continue reading Evolving the App Defense Alliance
Posted by Andy Qin, Irene Ang, Kostya Serebryany, Evgenii Stepanov
Since 2018, Google has partnered with ARM and collaborated with many ecosystem partners (SoCs vendors, mobile phone OEMs, etc.) to develop Memory Tagging Extension (MTE) technology. … Continue reading MTE – The promising path forward for memory safety
Posted by Nataliya Stanetsky, Android Security and Privacy Team
Keeping Google Play safe for users and developers remains a top priority for Google. As users increasingly prioritize their digital privacy and security, we continue to invest in our Dat… Continue reading More ways for users to identify independently security tested apps on Google Play
Posted by Steve Kafka, Group Product Manager and Roman Kirillov, Senior Engineering Manager
Mobile devices have supercharged our modern lives, helping us do everything from purchasing goods in store and paying bills online to storing financial data,… Continue reading Enhanced Google Play Protect real-time scanning for app installs
Posted by Andrew Walbran, Android Rust Team
Last year we wrote about how moving native code in Android from C++ to Rust has resulted in fewer security vulnerabilities. Most of the components we mentioned then were system services in userspace (runni… Continue reading Bare-metal Rust in Android
Posted by Eugene Liderman and Roger Piqueras Jover
SMS texting is frozen in time.
People still use and rely on trillions of SMS texts each year to exchange messages with friends, share family photos, and copy two-factor authentication codes to acc… Continue reading SMS Security & Privacy Gaps Make It Clear Users Need a Messaging Upgrade
Posted by Hamzeh Zawawy and Jon Bottarini, Android Security
Fuzzing is an effective technique for finding software vulnerabilities. Over the past few years Android has been focused on improving the effectiveness, scope, and convenience of fuzzing acr… Continue reading Android Goes All-in on Fuzzing
Posted by Roger Piqueras Jover, Yomna Nasser, and Sudhi Herle
Android is the first mobile operating system to introduce advanced cellular security mitigations for both consumers and enterprises. Android 14 introduces support for IT administrators to … Continue reading Android 14 introduces first-of-its-kind cellular connectivity security features
Posted by Giles Hogben, Privacy Engineering Director
Most modern consumer messaging platforms (including Google Messages) support end-to-end encryption, but users today are limited to communicating with contacts who use the same platform. This is why… Continue reading An important step towards secure and interoperable messaging