Android may not need antivirus software, researcher says

SMobile released what it says is the first antivirus software for Android, but one analyst said it's probably not necessary.

Antivirus developer SMobile released software this week to protect users of the G1 Android phone, although one security analyst wondered if people really need it.

Even though Android, the software developed by Google and running on just one phone sold by T-Mobile, is open source, it is unlikely to be more susceptible to malware than other, proprietary mobile operating systems, said Charlie Miller, principal analyst at Independent Security Evaluators and the researcher who found the first Android vulnerability.

While a developer could write a harmful application and distribute it via the Android Market, Google has put up some roadblocks that would make it hard for malware to cause much harm, Miller said. "If you want to do anything dangerous like access personal contacts, you have to specifically say to the virtual machine 'these are things I'm going to have to do,' and the virtual machine will ask the user if that's OK," he said. Android applications run in a Java virtual machine on the phone.

For example, if a user downloads a Scrabble game containing malicious code that tries to gather information from a user's e-mail account, the phone will ask the user to approve the application's access to the e-mail account. In that case, the user would decline the download, realizing that a Scrabble game shouldn't need to read from an e-mail account, he said.

Just this week, however, hackers discovered a way to install applications natively on the phone instead of using the virtual machine. The capability could open doors to new security threats by letting applications access any phone function. Google said it has developed a fix for the bug and plans to push it out to users soon.

That is the second vulnerability to be discovered in as many weeks. The first, discovered by Miller, resulted from Google using outdated open-source code that didn't include an update already issued that closed the hole. But such vulnerabilities aren't unique to Android or open-source software. "The fact is, you could do that against the iPhone or against the BlackBerry or whatever. All these phones have issues," he said.

SMobile argues that because Android is open source, it will attract more hackers who will be able to look for holes they can exploit to gather user data for malicious purposes.

While companies including McAfee, Symantec and F-Secure make smartphone antivirus software, although not yet for Android, only a few mobile viruses have appeared, and those haven't spread very far. That's partly because of the wide variety of operating systems that run mobile phones. A virus written for one operating system doesn't spread widely because it won't work on phones running different operating systems.

In addition, people generally don't use their phones to access or send the same kind of important data that they do on their PCs, making phones less-interesting targets for people looking to steal that information. Mobile commerce, for example, is a very small market, so few people enter their credit card numbers into their phones.

Miller said that if people are worried about security on their phones, software from providers like SMobile might let them rest easier, although he probably wouldn't bother to buy such software for himself.

While Google or mobile service providers are sure to patch holes or issue fixes to known problems, SMobile could potentially do so faster. Miller says he notified Google of the vulnerability he discovered on Oct. 20. Google and T-Mobile began sending out a patch on Oct. 31.

SMobile said its software will scan the G1 for more than 400 types of mobile malware, including viruses, worms and Trojans that can spread between mobile phones via the memory card. If new types of malware appear, SMobile's software will detect it and provide "timely" updates for users, it said.

Android users can buy the software at the company's Web site or at Handango, an online store for mobile applications. VirusGuard for Android costs US$10. Once the Android Market begins allowing developers to charge for applications, the software will be available there, SMobile said.

SMobile offers antivirus software for other phone platforms, including Nokia's S60. Nokia, the number-one cell phone maker in the world, and thus the best target for hackers, promotes SMobile's software on its Web site.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags Google Androidantivirus

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Nancy Gohring

IDG News Service
Show Comments

Essentials

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?