Discussion on:

Are antivirus applications necessary on the Android mobile platform?

While I know to read what apps access before downloading, I still have AVG for Android (https://market.android.com/details?id=com.antivirus&feature=search_result) and I really like it. It scans apps as I download them and lets me know if they are malicious or not. It's nice to have a little extra security

I'll have to give lookout a try, too

Undoubtedly.

I'm guessing that the usually inaccurate buzzword "piracy" was intended, however. So, these numbers are needed to prevent infringement? How? And why not, then, have an "app number" for the device for this express purpose? Why is the stupid always built right in from the bottom up?

"Since Android is based on Linux, doesn???t it inherit the same layers of security?"

Like what distribution? "Based on Linux" is nearly meaningless when the rest of the OS isn't designed with privacy and security in mind. I'm not saying this is true of Android, I don't know. But I wouldn't use, say, Ubuntu for any purpose where security is expected.

Even the best AV is of no use for stupid users. Just like the label on a lawnmower deck strongly advising the operator not to place hands under the machine while running, information and alerts on suspicious applications will be studiously ignored by those who want what they want and are always in a hurry to get it.

You've hit on the fundamental problem when evaluating whether or not to install an app. You say, "most users ignore the warnings because they have no idea what the warnings mean."

I've looked at the permissions for some applications and have no idea why they need access to a particular permission. I'd love to either better understand why the app needs the permission or be able to disable the app from having that one permission. Neither is possible.

So, when you say, "if you pay close attention to permissions notices and warnings," we've hit upon a conundrum. I'd say the average user (like my sister-in-law who doesn't even know what "a Linux" is) has no idea whether or not a particular application will be harmful or not.

Rather than going down the techno-speak pathway that Linux has always done and which makes it unintelligible to the uninitiated, I think the Android operating system should take the approach you have used above and advise users in a "High/Medium/Low" way whether an app is likely to be a threat or not.

Someone is likely to say that this is the users' fault because if they just took responsibility to educate themselves about how operating systems work, then this wouldn't be a problem. And I'd like to say to them, "If you only knew all the building codes and told the contractor how to build your house right the first time, you wouldn't be in this pickle of having a house that is junk." (Or substitute any profession that you happen to not know anything about and rely upon professionals to guide you.)

There is a two edged sword here. Users certainly need to know something, but Technologists need to do a better job to make the technology meet the average 21st century user where they are today.

This isn't Linux-specific. I see it every day with my hundreds of Windows users.

"Hey, that error came up, but I just hit 'Continue'."

"Uh, which error?"

"That Microsoft one."

"What did it say?"

"I dunno, I just hit 'Continue'."

This isn't even computer-specific; just ask any mechanic how many customers are driving around with 'Check Engine' lights on. People just ignore warning flags if it inconveniences them, no matter how they're presented.

This is true. In fact, the car analogy was one I was thinking about discussing. The check engine light is analogous to "caution" (Oxygen sensor or some usually minor problem) and the red oil light is analogous to "critical warning". People don't drive long (one way or the other) with the red engine oil light on, but while advisable to get the engine checked you can usually drive a long time with the Check Engine light on.

I was hoping to see the matter of security on rooted Android devices addressed. It is a subject that is of interest to a considerable sector of the community.

Is there currently an app or built-in Android function that will scan the currently installed applications and report which ones are configured for each of the specified permission types? I have never seen such an app, but I will use it if available, on my own phone but especially my son's... Perhaps this is or can be part of an anti-virus app, and hopefully will allow me to disable any specific permission which I feel is excessive.

if you know enough to root a device, don't you already know enough to be aware of the security risks? Or are more non-techies undertaking this operation than I'm aware of?

So it would seem that there should be an App which scans other Apps and displays the permissions accorded to them....so that you can easily review your security level at any point in time...right? I just checked through the settings on my new Android phone and didn't see anything that provided that info.

So I too would agree with the dashboard warning light idea

So it would seem that there should be an App which scans other Apps and displays the permissions accorded to them....so that you can easily review your security level at any point in time...right? I just checked through the settings on my new Android phone and didn't see anything that provided that info.

So I too would agree with the dashboard warning light idea

Why the apps need this level of access to the data! Why the Android market is not secure to guarantee the apps. It??s a shame, all the market it??s vunerable and I just need a smartphone to keep my access into my stuff and do some phone calls and we pay a lot for this unsecure environment.

Hi,
Recently Quick Heal Antivirus has launched a Mobile Security for Android.
Find more details about its features on
http://am-techzone.blogspot.com/2011/08/mobile-security-for-android-by.html

Great analysis. Good job!

Some apps are cool though; I am currently using AVG's mobile security apps.
http://www.avg.com/antivirus-for-android
It seems cool. I have not noticed any slowdown. It scans automatically every app I
install, plus few other great functionalities.

The use of the mobile devices has continued to grow and this growth has been matched in the growth of cyber attacks aimed at these devices. The growth of the mobile app niche has also seen an increase in the threats hidden and associated with many apps. Other applications have been made in such a way that they will download malware and such programs like key-loggers and others that will record phone calls and the text messages. Work towards getting the best antivirus for mobile. Here are some useful resources in finding the best antivirus for mobile: www.avg.com/antivirus-for-android and http://georgecm.hubpages.com/hub/best-free-antivirus-for-android for further reading.

Well in my opinion antivirus is must for androids if you download apps or games from third parties
and if u only download apps or games from google play store then its optional to have antivirus installed some time i have to download apps for third parties so i have installed Appriva cloud antivirus which you can download from google play store it automatically scan app while they are downloading and if they are infected it will stop and download and warn you about it here is link if u guys wana try it out
https://play.google.com/store/apps/details?id=com.moobila.appriva.av&hl=en