iTnews
  • Home
  • News
  • Technology
  • Security

TaintDroid reveals security threat from app downloads

By Eric Doyle on Oct 4, 2010 10:01AM
TaintDroid reveals security threat from app downloads

Android free apps display some inappropriate behaviour.

Free Android apps could pose a business threat as a new study has shown that quite a few apps transfer substantial amounts of personal data to third-parties.

TaintDroid, a proof-of-concept tool, monitored the behaviour of 30 popular Android applications. The research team from Intel Labs, Duke University, and Penn State University found 68 instances of potential misuse of users' private information across 20 applications.

The free third-party software, containing advertising banners, was found to be transmitting users' private information to remote advertising servers. The users would not have been aware of what was being sent or to whom.

Some phones were even transmitting data when the adverts were not being displayed.

The information transmitted went beyond name and phone details, sometimes it also included the GPS location of the user, stored phone numbers and even SIM card identifiers. In some cases found the user's location was sent at 30 second intervals.

It is only because Android is open source that the researchers were able to legally investigate app behaviour. The team suspected that they would find the same behaviour if it could access proprietary systems like the iPhone and other mobile phone operating systems.

It must be pointed out that the apps did not just download and take over the system, they had to be given permission to access personal data. The team said that the typical user would assume this would help the application to work and just say yes without a second thought.

What the apps tended not to say was how much data was going to be accessed and how often, or where, it would be dispatched.

This article originally appeared at itpro.co.uk

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © ITPro, Dennis Publishing
Tags:
appdownloadsfromrevealssecuritysoftwaretaintdroidthethreat

Partner Content

Security: Understanding the fundamentals of governance, risk & compliance
Promoted Content Security: Understanding the fundamentals of governance, risk & compliance
The Great Resignation has intensified insider security threats
Promoted Content The Great Resignation has intensified insider security threats
Why rethinking your CMS is crucial for customer retention
Promoted Content Why rethinking your CMS is crucial for customer retention
Why Genworth Australia embraced low-code software development
Promoted Content Why Genworth Australia embraced low-code software development

Sponsored Whitepapers

Extracting the value of data using Unified Observability
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
Video: Watch Juniper talk about its Aston Martin partnership

Events

  • Micro Focus Information Management & Governance (IM&G) Forum 2022
  • CRN Channel Meets: CyberSecurity Live Event
  • IoT Insights: Secure By Design for manufacturing
  • Cyber Security for Government Summit
  • Forrester Technology & Innovation Asia Pacific 2022
By Eric Doyle
Oct 4 2010
10:01AM
0 Comments

Related Articles

  • The Good Guys pauses facial recognition trial
  • Apple's Tim Cook says 'threat profile' of iPhone justifies App Store rules
  • Police analyse 19 million messages captured in AN0M encrypted comms sting
  • GitLab races out vulnerability-fix release
Share on Twitter Share on Facebook Share on LinkedIn Share on Whatsapp Email A Friend

Most Read Articles

Australia scraps digital passenger cards for international arrivals

Australia scraps digital passenger cards for international arrivals

PayTo rollout kicks off

PayTo rollout kicks off

Neobank Volt exits the banking industry

Neobank Volt exits the banking industry

Westpac sets sights on hybrid meeting spaces

Westpac sets sights on hybrid meeting spaces

Digital Nation

Case Study: Multicloud business drivers at MLC Life Insurance
Case Study: Multicloud business drivers at MLC Life Insurance
Case study: AFL kicks goals with its new digital platform
Case study: AFL kicks goals with its new digital platform
Case Study: EY invests in AI to improve approach to flexible working
Case Study: EY invests in AI to improve approach to flexible working
Personalisation strategies need to be built from the ground up
Personalisation strategies need to be built from the ground up
Case Study: Good360 deploys NetSuite, Magento and Salesforce
Case Study: Good360 deploys NetSuite, Magento and Salesforce
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.
Your use of this website constitutes acceptance of nextmedia's Privacy Policy and Terms & Conditions.