Marlinspike releases Android firewall

The first dynamic Android firewall was released today by respected security expert Moxie Marlinspike.

The free software, dubbed WhisperMonitor, is a dynamic firewall and real-time connection monitor designed to restrict how sometimes-unruly Android apps handle user data.

It monitors all outbound connection attempts by applications and the operating system, and asks users to permit or block any URLs and port numbers that are accessed.

The software also allows users to set firewall rules for individual applications, and provides a connection history for installed software.

WhisperMonitor is bundled with WhisperCore, a device-level encryption application for Android storage, including the phone's SD card.

"We developed WhisperMonitor in response to the string of recent revelations about user's private details being leaked by apps or by the OS," Marlinspike told SC Australia.

"The major players driving Android right now see [the device] primarily as a consumer-facing platform, so they tend to focus more on consumer features than security."

He said WhisperMonitor is the first dynamic firewall and connection monitor for Android.

Static application firewalls for rooted Android phones are already available.

WhisperMonitor can be downloaded here.

Copyright © SC Magazine, Australia