All language subtitles for 2. Intro to Android

Android is an open source Linux based software stack created for a wide array of devices and form factors.
1

The following diagram shows the major components of the Android platform. The foundation of the Android
2

platform is the Linux kernel for example the android runtime ART relies on the Linux kernel for
3

underlying functionalities such as threading and low level memory management.
4

The hardware abstraction layer AGL provides standard interfaces that expose device hardware capabilities
5

to the higher level Java API framework. For devices running Android version 5.0 API level twenty one
6

or higher.
7

Each app runs on its own process and with its own instance of the Android runtime ART.
8

Prior to Android version 5.0 API level twenty one Dalvik was the android runtime if your app runs well
9

on ART then it should work on Dalvik as well.
10

But the reverse may not be true. Many core Android system components and services such as ART and
11

HAL are built from native code that require native libraries written in C and C++ if you are developing
12

an app that requires C or C++ code you can use the Android NDK to access some of these native platform
13

libraries directly from your native code.
14

The entire feature set of the Android OS is available to you through APIs written in the Java language
15

these APIs form the building blocks you need to create Android apps.
16

Developers have full access to the same framework APIs that Android system apps use. Android comes
17

with a set of core apps for email sms messaging calendars Internet browsing contacts and more
18

Apps included with the platform have no special status among the apps the user chooses to install.
19

So a third party app can become the user's default web browser,
20

Sms messenger or even the default keyboard. Android package APK is the package file format used
21

by the Android operating system for distribution and installation of mobile apps. An APK file is an
22

archive that usually contains the following files and directories META INF is a directory containing
23

the manifest file the app's certificate and the list of resources and an SHA1 digest of the
24

corresponding lines in the manifest file resources is a file containing pre compiled resources
25

such as binary XML classes dot decks contains the classes compiled in the dex file format which is
26

understandable by the Dalvik virtual machine and by the Android runtime. RES is the directory containing
27

resources not compiled into resources .ARSE. Android manifest .XML is an additional Android manifest
28

file describing the name, version, access rights and reference library files for the application.
29

You may also have a lib directory containing the platform dependent compiled code and an assets directory
30

containing application assets. The Android platform takes advantage of the Linux user based protection
31

to identify and isolate app resources.
32

This isolates apps from each other and protects apps and the system from malicious apps.
33

To do this android assigns a unique user ID, UID to each Android application and runs it in its
34

own process.
35

Android uses the UID to set up a kernel level application sandbox the kernel enforces security between
36

apps and the system at the process level through standard Linux facilities such as user and group IDS
37

that are assigned to apps by default apps can't interact with each other and have limited access to
38

the OS.
39

If app a tries to do something malicious such as read application B's data or dial the phone without
40

permission is prevented from doing so because it doesn't have the appropriate default user privileges.
41

The purpose of a permission is to protect the privacy of an Android user.
42

Android apps must request permission to access sensitive user data such as contacts and SMS
43

as well as certain system features such as camera and Internet. Depending on the feature,
44

the system might grant the permission automatically or might prompt the user to approve the request.
45

Between application sandboxing and permissions,
46

the OS is ensuring that apps can only perform the sensitive operations that they are explicitly allowed to
47

If you are interested in knowing more about the Android security model we recommend this white paper
48

that was recently released by Google.
49

The paper aims to both document the Android security model and discuss its implications. Google Play
50

protect is Google's built in malware protection for Android it automatically scans your device and make
51

sure you have the latest in mobile security. All Android apps undergo rigorous security testing before
52

appearing in the Google Play Store. Google vets every app and developer in Google Play and suspends those
53

who violate their policies.
54

Play protect scans billions of apps daily to make sure everything is secure. That way when you download
55

an app from the official Play Store.
56

You know it's been checked by Google Play Protect.
57

That being said as we have seen in the past malware is still able to make its way onto the play store.
58

However when opting to download from the official store or an unregulated third party store we always
59

recommend to stick to the official store.
60

That being said one can also install non play store apps by enabling a simple feature.
61

This practice is called side loading when you allow any application to be side loaded on your phone.
62

You're bypassing the security protocols that are enabled in the Play Store i.e. what Google does behind
63

the scenes to make sure all the apps you install from the official channels are safe.
64

However there are reasons legitimate or not that caused people to side load.
65

For example when apps are blocked for your specific device when apps are not available in your country
66

when apps are banned from the official store, in order to download a paid app for free which may be illegal
67

in order to obtain an ad free version of an app which may also be illegal, for app development testing
68

and when developing a custom private app.
69

Finally we would like to discuss an issue that seems to plague the Android OS and that is the issue
70

of fragmentation. When creating an Android app.
71

you'll be asked for the minimum OS version that your app should support.
72

Choosing a newer minimum version will usually mean that your app will be supported by fewer Android
73

devices.
74

The dashboard shows the percentage of Android devices that are running each OS version and lower.
75

For example here we see that at the time of this report Android 10 was the latest available release
76

version. However Android 10 had only eight point two percent of the distribution.
77

The bigger the jump in the cumulative distribution the higher the number of Android devices running
78

that specific version.
79

For example the difference between Nougat and Marshmallow is eighty four point nine minus seventy three
80

point seven which equals eleven point two percent.
81

This means that at this point there were eleven point two percent of Android devices still running Android Nougat.
82

Some of these percentages seem small but when you consider the billions of Android devices that
83

are out there in the world 1 percent of all Android devices is very significant. Imagine you have a vulnerability
84

against one specific version that only has 1 percent distribution.
85

You cannot simply omit this as an issue since this vulnerability might still be impacting millions of
86

devices.
87

You may find many of these old versions are not necessarily on smartphones but rather may be on televisions
88

or cars for example.
89

That being said many of these devices are still connected to the Internet.
90

So this is something that's significant and something we have to consider especially in Android security.
91

You may even come across cases where for example a malware author designed malware exploiting a vulnerability
92

for older Android versions and actually checking the version number of the device before triggering
93

the attack.
94

For example the code would say is Android version older than Android 5.
95

If so then launch an attack using some old vulnerability that they found.