Thursday, February 10, 2011

Mobile Security - the Android Version

I was recently asked by a Droid X owner if she needs to have  anti-virus software for her phone.  She asked because when purchasing Norton Antivirus for her PC it was bundled with a mobile version.  I tend not to worry too much about mobile security, but when prompted to write this article, learned there is much we can do to mitigate the already low risk of mobile phone attack.

First of all, how is my mobile phone at risk?  The biggest risk to your mobile phone is not virus attacks or hacked passwords and personal information.  The biggest risk to your mobile phone is your couch cushions.  You are much more likely to lose your phone (in our house, most lost electronic devices and remotes are found in our couch cushions) than you are to come under the attack of some kind of malware or virus laden download.  The second biggest risk to your device is theft.



Protect Against Theft and Loss:
  1. Pick up an app like Lookout Mobile Security that allows you to remotely lock your phone in the event of theft or loss.  Lookout also has a function that will allow you to trigger a loud sound from your device, you know, for when you lose it in your couch cushions.
  2. Require a password for using your device – this can be configured in the settings for your device.  Try not to use a number that is easy to guess (birthday, anniversary…). 
  3.  Back-up your device!  This is the most important piece of advice I can offer.  If your device is backed up, then it can be easily reconfigured on a new device.  Also, you’ll have no remorse when hitting that button to remotely wipe your phone.  Use a backup service that saves all of your apps, settings, and app data.  I use Titanium Backup Pro (root required) in conjunction with DropBox so all my backups live in the cloud.  Lookout Mobile Security also offers a backup function.


Protection Against Malware:
  1. Require a pin to be used in order to connect to your device via Bluetooth.  And while we’re at it, don’t keep your device in discoverable mode for Bluetooth except when you are connecting a device.
  2. You know those permissions you are asked to accept when downloading an app?  Make sure you read those permissions before you download the app.  Do they make sense?  Does a calculator app really need access to your SMS or location data? 
  3. Use the same kind of common sense security measures you use on your PC.  Don’t download attachments from people you don’t know (or from some people you DO know). 
  4. If you’re installing apps from outside the market, only do so from trusted sources.  The same goes for ROMs, themes, and patches.  Make sure you read the comments regarding these types of files before loading them onto your device.
  5. Back-up your device.  Huh, where have I heard that before?  If your device gets infected with a virus (which will probably never happen, but on the outside chance it does), you can completely wipe your phone and/or reflash the system files in order to bring yourself back to stock.  Then restore your device using Titanium Backup or some other source.

I personally don’t use antivirus/security apps on my phone.  I know enough about my phone to be able to recover it if necessary, and I figure if someone steals it, all sensitive data is either password protected or can be wiped by changing my Gmail password.  If you are less trusting, I recommend you try out Lookout Mobile Security.  It’s available for free in the Android market.  The free version does not allow the ability to remotely lock the device.  A $30/year fee is required to update to a premium account.

No comments:

Post a Comment