The existence of a vulnerability does not mean the use of a vulnerability. You are correct that apps such as Flash, Acrobat, etc contain vulnerabilities that can be exploited. Right now, the main threat vector we're seeing are trojanized Apps. These can be modified legitimate apps or copy cats Apps. At some point I would expect to see attacks via a drive by download type or while using apps such as Flash, etc.
Put it another way for right now. Let's say that you are a hacker who wants to make money. Say that 80% of traffic to your site is on a Windows machine with 10% on Mac, 5% on iOS, and 5% Android. Where would you invest the time and effort in? You'd go for the biggest slice.
Right now, the extent of the protection we currently provide is in the Web Protection component. Right now, there is virus protection and we do plan to add further layers of protection. NMS uses a system similar to Safeweb. You can use the Safeweb site to check a site, but keep in mind that there may be a delay before that is added to the system that NMS uses. Primarily to ensure that the site is in fact targetting the Android platform.
0 comments:
Post a Comment