Market Overview of Mobile Operating Systems and Security Aspects

…… ... 2019/20) 11

Rannenberg

Kai Kai Dr. UniversityFrankfurt M. a. Lecture Goethe Prof. Chairof Mobile Multilateral & Business Security Mobile Business I (WS MarketOverview Operating Mobile of Aspects Systemsand Security …… ... 2 Overview based) - independent mobile OS mobile independent - countermeasures OS

Microsoft Windows Phone / 10 Mobile 10 / Phone Windows Microsoft Firefox KaiOS Android (by Open Handset Alliance) Handset (byOpen Android Mobile Edition, Phone PC Pocket PC, Pocket CE, Windows Microsoft Overview (bySymbian Foundation) Symbianplatform Linux Embedded Palm OS Palm Apple iOS (Unix Overview

§ § § § § § § § § § §

Attacks and Manufacturer

Mobile OS unavailable to other device manufacturers The market for mobile devices and mobile OS

§ §

§ § …… ... 3 2019) - ] 2012 Statcounter [ OS Worldwide smartphone sales to end end to sales smartphone Worldwide usersbyoperating system ( …… ... 4 0.2 0.1 87.8 12.1 86.1 13.7 100.0 100.0 Share(%) Share (%) Share 2Q17 Market Market 2Q17 [Gartner2018] 1Q17 Market 2Q17 Units Units 1Q17 433.1 607.3 44,314.8 51,992.5 321,848.2 366,596.1 325,900.9 378,500.6 0.0 0.0 88.0 11.9 85.9 14.1 100.0 100.0 Share(%) Share (%) Share 2Q18 Market Market 2Q18 1Q18 Market Worldwide smartphone sales to end end to sales smartphone Worldwide usersbyoperating system (2017/18) 2Q18 Units Units 1Q18 112.1 131.1 44,715.1 54,058.9 374,330.6 329,503.4 329,313.9 383,503.9 iOS iOS Total Tota l System System Android Android OtherOS OtherOS Operating Operating Operating …… ... 5 Others [Gartner2013] (Q2 2013) (Q2 Symbian Android 79,0% Bada BlackBerry OS Worldwide smartphone sales to end end to sales smartphone Worldwide usersbyoperating system Windows iOS 14,2% iOS Bada 0,4% Windows 3,3% Others 0,2% Symbian 0,3% Android BlackBerry OS 2,7% …… ... 6 2014a] (Q2 2014) (Q2 Android 84,7% Others Statista [ Bada Symbian BlackBerry BlackBerry OS Windows Worldwide smartphone sales to end end to sales smartphone Worldwide usersbyoperating system iOS Android iOS 11,7% iOS 0,6% Others Windows 2,5% BlackBerry OS 0,5% OS BlackBerry …… ... 7 82,8% 2015a] (Q2 2015) (Q2 Android Statista [ Worldwide smartphone sales to end end to sales smartphone Worldwide usersbyoperating system 13,9% iOS 0,4% Others Windows 2,6% BlackBerry OS 0,3% OS BlackBerry …… ... 8 Android 86.2% 2016b] (Q2 2016) (Q2 Statista [ Worldwide smartphone sales to end end to sales smartphone Worldwide usersbyoperating system iOS 12.9% iOS Windows 0.6% Others0.2% BlackBerry OS 0.1% OS BlackBerry …… ... 9 Android 87.7% (Q2 2017) (Q2 [Statista 2017] [Statista Worldwide smartphone sales to end end to sales smartphone Worldwide usersbyoperating system iOS 12.1% iOS Others0.2% …… ... 10 [Nielsen2013] ” Others During Q2 2013 2013 Q2 During that runs on the on the runs that Android operating system. “ an average of 52% smartphone of US the in owners had a handset

% 40 ; iOS Windows 52% ; by operating system(Q2 2013) system(Q2 operating by USinstalled smart base phone BlackBerry OS Android iOS Android 03%

;

02% ; 02% ;

BlackBerry OS

Windows Others …… ... 11 ” During July 2014 2014 July During that runs on the on the runs that Android operating system. “ an average of 51,5% of smartphone US the in owners had a handset [Statista2014b] iOS 42,4% iOS Others BlackBerry OS BlackBerry Windows Microsoft Android 51,5% USinstalled smart base phone iOS Apple by operating system (July 2014) (July system operating by Android 0,2% Others Windows 3,6% BlackBerry OS 2,3% OS BlackBerry …… ... 12 that runs on the on the runs that Android operating system. During July 2015 2015 July During an average of 51,4% of smartphone US the in owners had a handset [statista2015a] 44,2% iOS 51,4% Android USinstalled smart base phone by operating system (July 2015) (July system operating by 0,2% Others Windows 2,9% BlackBerry OS 1,3% OS BlackBerry …… ... 13 that runs on the on the runs that Android operating system. During July 2016 2016 July During an average of 53,3% of smartphone US the in owners had a handset [statista2016c] iOS 43,1% iOS USinstalled smart base phone by operating system (July 2016) (July system operating by Android 54% Windows 2,1% BlackBerry OS 0,8% OS BlackBerry …… ... 14 Android operating system. During June 2017 2017 June During an average of 54% smartphone of US the in owners had a handset on the runs that [statista2017b] iOS 44,9% iOS USinstalled smart base phone by operating system (June 2017) (June system operating by Android 53,3% Windows 1,3% BlackBerry OS 0,5% OS BlackBerry …… ... 15 2.8 0.7 0.5 83.8 12.2 2014 100.0 - 2Q14 2Q14 Market In 1.000 Units Share(%) 8,095 2,044 35,345 1,416.8 243,484 2015 vs. Q2 vs. 2015 - [Gartner2015, Gartner2016] [Gartner2015, 290,384.4 2Q14 Units 2Q14 by operating system operating by 0.4 2.5 0.3 82.2 14.6 100.0 2Q15 2Q15 Market Share(%) 2016 vs. Q2 vs. 2016 - Q2 8,198 1,153 48,086 1,229.0 271,010 329,676.4 2Q15 Units 2Q15 0 Worldwide smartphone sales to end users end to sales smartphone Worldwide 0.6 0.2 0.1 86.2 12.9 100. 2Q16 2Q16 Market Share(%) 400.4 680.6 1,971.0 44,395.0 296,912.8 344,359.7 2Q16 Units 2Q16 TOTAL

iOS

Others Android Windows

BlackBerry OS

System Operating …… ... 16 7.8 5.0 2Q15 14.6 50.8 21.9 2015 100.0 Market Market - Share (%) Share In 1.000 Units byvendor In 1.000 Units to end users Others 2Q15 2016 vs. Q2 vs. 2016 48,085.5 25,825.8 16,405.9 72,072.5 - 167,286.6 329,676.4 8.9 5.4 2Q16 50.5 22.3 12.9 100.0 Market Market [Gartner2015,Gartner2016] Share (%) Share 2017 vs. Q2 vs. 2017 - 2Q16 Q2 Others 76,743.5 44,395.0 30.670.7 18,489.6 174,061.0 344,359.7 Worldwide smartphone sales sales smartphone Worldwide 9.8 7.1 2Q17 48.4 22.5 12.1 100.0 Market Market Share (%) Share Others 26,092.5 82,535.1 44,314.8 35,964.3 177,327.7 366,234.4 2Q17 Units 2Q17 OPPO Apple TOTAL Others Huawei Lenovo* Samsung Company …… ... 17 Long term trends (maybe?) trends term Long

and PC connectivity PC and email push with phone RIMPDA 1st Blackberry: Palm: 1st small and affordable PDA with address book, calendar, book, address calendar, with PDA affordable and small 1st Palm: Nokia: Feature phones Nokia:Feature Microsoft: Architectures, operating systems operating Microsoft:Architectures,

§ § § §

available from the big players: big the from available Killer Application Champions are very successfulApplication Killer very Championsare also is application killer their until time some for

oftenhave some (sometimes relatively modest) investment: high to due share market Big players (originally from neighbouring fields) fields) neighbouring from (originally players Big

§ § …… ... 18 Mobile devices vs. vs. devices Mobile stationary devices stationary

Usability issues Usability Security and system integrity issues Limited device capabilities and resources (storage, memory, processing time, etc.)

§ § §

the following challenges: following the mobile operating systems also have to cope with with cope to have also systems operating mobile Dueto the limitations of the mobile devices, § …… ... 19 Overview based) - independent mobile OS mobile independent - countermeasures OS

Microsoft Windows Phone / 10 Mobile 10 / Phone Windows Microsoft Firefox KaiOS Embedded Linux Embedded Alliance) Handset (byOpen Android Mobile Edition, Phone PC Pocket PC, Pocket CE, Windows Microsoft Overview (bySymbian Foundation) Symbianplatform Overview OS Palm Apple iOS (Unix

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 20 Examples run on Android on run manufacturers , initially developed by Palm, later HP) later Palm, by developed initially , (PRIV, DTEK60, and DTEK50) Cortado operating systems for their ” 13.0 WebOS based) LuneOS - closed (Unix “ bada Mobile OS unavailable to other device device other to unavailable OS Mobile (formerly (formerly iOS

Latest release: v2.0, e.g. on Samsung Wave 3 S8600 (discontinued 2013) (discontinued 3 S8600 Wave Samsung on e.g. v2.0, release: Latest Latest release: BlackBerry OS 10.3.3 OS BlackBerry release: Latest Newer Blackberry models release: Latest Not to be confused with Palm OS (now: Garnet OS) that was also initially developed by Palm Latest release: Palm OS Cobalt 6.1 in February 2004 February in 6.1 Cobalt OS Palm release: Latest iOS release: Latest

§ § § § § § §

Samsung LuneOS Apple Apple BlackBerry OS Palm(GarnetOS OS)

§ § § § § Originally, most mobile phone manufacturers used their own mobile devices. § …… ... 21 manufacturers party software - General observations rd : Less flexible, as 3 as flexible, Less : Tend to be not as much affected by Mobile OS unavailable to other device device other to unavailable OS Mobile

Later, more and more platforms switched to more open and interoperable operating systems (e.g. Android). OS, Symbian CE, Windows Disadvantage cannot be easily installed and executed Advantage: malware compared to operating systems available to many external manufacturers

§ § …… ... 22 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 23 Devices PalmOS …… ... 24 Overview PalmOS palmsource 2004 - ) version 6.1 (Cobalt 6.1 version

equipped with Palm OS 5.4 (Garnet), such as the Tungsten series. the Tungsten as such (Garnet), OS 5.4 with Palm equipped … There are no devices using version 6.1 on the market. Most of the devices are Fossil Samsung Sony Palm (e.g. Treo series) Handspring devices) (navigation Garmin

§ § § § § § § §

Last Several device manufacturers: device Several The operating The system is made by

§ § …… ... 25 Features PalmOS

CDMA Bluetooth WiFi(IEEE 802.11) GSM/GPRS IrDA

§ § § § § Long battery life Large choice of 3rd party software available Support for several encryption and security algorithms RC4) SHA1, RSA, (e.g. Integrated personal information management (PIM) Support of the TCP/IP network protocol Communication:

§ §

§ § …… ... 26 History PalmOS with WindowsMobile with ” future versions to be based on the the on based be to versions future – Packard acquired Palm for $1,2 for billion, name Palm acquired Packard TreoSmartphones - “ s ’

2011: HP announced to stop the production of all HPwebOS HPwebOS all of production the stop to 2011:announced HP tablets and phones smart including devices, Access Linux platform Linux Access Hewlett 2010: HPwebOS to change 2004: Palm OS 6.1 (Cobalt) and Palm OS5.4 2004: Palm (Garnet) OS6.1 Palm (Cobalt)and 2006:Palm OS Garnet to change Name 1998:III OSv3 Palm Palm using display colour a OSand Palm 2000: IIIc, using Palm device first 2003:OS5 Palm 1996: Palm Pilot 1000, first device using Palm OS Palm using 1000, 1996:device Pilot first Palm

§ § § § § § § § § …… ... 27 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 28 Apple iOS iPhone, iPod iPhone, for 13 Apple TV Apple : iOS iOS : and by party hardware - based operating system release -

on third iOS derived from Mac OS X, OS Mac from derived iOS a Unix Apple does not permit the OS to run Touch, iPad Latest Developed

§ § § § …… ... 29 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 30 ) based - Qtopia = Linux mobile OS mobile Extended( SailfishOS(by Jolla) independent à Qt - Linux, ) for Symbian^3 devices Symbian^3 for “ 2 (April 2017) 10.0.15063.608 (by Nokia, Intel) Intel) Nokia, (by Openmoko 1703 ( ) MeeGo Manufacturer 2.1.0.1 2.1.0.1 (Iijoki) profitorganisation Mozilla) 2016 à - Gecko (April 2015) (May 2019) to to Nokia Nokia Belle Feature Pack 2.2.0 2.6.0 “ 10.0 (Linux Mobile), Mobile), (Linux Boot (by Nokia) (by LiMo (by (by (by Samsung, Intel, Linux Foundation) Linux Intel, Samsung, (by Latest release: release: Latest September in Cancelled release: Latest Latest release: Windows Phone 8.1 Phone Windows release: Latest OS Sailfish release: Latest 2017) (May 3.0 release: Latest Latest release: release: Latest release: Latest Mobile 10 Windows release: Latest § § § § § § § § § KaiOS Maemo Tizen non (by OS Firefox Symbianplatform Alliance) Handset Open (by Android Mobile Windows Phone Windows Linux: § § § § § § § § § …… ... 31 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 32 Devices Symbian …… ... 33 Symbian [Symbian2006] Consortium/Licensees In 2006, Symbian was owned by owned was Symbian 2006, In …… ... 34 2008 - 1998 major major Symbian History becomes the Symbian^1 („Symbian („Symbian Symbian^1 party applications. - announced rd buys Symbian Ltd. and Nokia to code of Symbian platform Symbian of to code Symbian Foundation : It to is install possible 3 “ Symbian OS telephones were available since 2001 since available were telephones OS Symbian “ Open ) „ Beginning of 2001: Nokia 9210 Communicator “

§ § 2008 December: contributor 2008 June: 2007: Symbian OS 9.4 (S60 5th edition) = One HSDPA 2005: Symbian OS 9.1 (S60 3rd edition) 2006: Symbian OS 9.3 released, extending the OS with WiFi and 2004: Symbian OS 8.0 Siemens and Sony Ericsson Ericsson Sony and Siemens „Open Owner: Ericsson, Nokia, Panasonic, Psion, Samsung Electronics, Symbian was founded as a privately owned company in June 1998. 1998. June in company owned privately a as founded was Symbian

§ §

§ § § § §

§ § …… ... 35 2014 - 2009 . Symbian Foundation Symbian History Symbian^3 to . Nokia takes over governance of the Symbian Nokia of . takes governance over anupdate as NokiaN8 first smartphone runto Symbian^3. Symbiansoftware [Nokia2013] ). ) organisation founded only only - Symbian Belle SymbianBelle successorSymbianto OS and Nokia60 Series outsources and store.ovi.com Relevance of Symbian platform, especially in themarket,app mobile drops especially Symbianplatform, of Relevance . Market . share ininnotably sharp the smartphonehigh priced decline, segment Symbian Foundation Symbian platform

inthe Nokia Store ( 2015January: Nokia Store discontinued Store.and transferred partially OperatoMobile 2014published January: be can applications new No 2013: Nokia Belle Feature Pack2(latest version) 2013:Nokia Belle development and 2,300 employees to Accentureto and development 2,300 employees renamed Nokiato2012: Belle Symbian Belle 2011September: Nokia 2011 February: Nokia collaborates with Microsoft and their adoptswith 2011 Microsoft Phone7for February: Windows Nokia collaborates smartphones. significantly 2011:Symbian Anna transitioninto licensinga platform. 2010 November: Due to a lack of support 2010of November: Duefunding lack from a to members, 2010:Symbian OS 9.5(Symbian^3 2009: 2009:

§ §

§ § § § § …… ... 36 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 37 Devices Embedded Linux …… ... 38 Overview installed Linux Linux installed - Embedded Linux operatingsystem. “ Open Source Open

OS platforms.OS Motorola, as one of the major mobile phone phone mobile major the of one as Motorola, their of as(one) Linux wasusing manufacturers, However, there are several Linux distributions, distributions, Linux several are there However, on installed be can that CLinux, µ as such iPAQ). devices(e.g. existing were offering devices with a pre a with devices offering were Panasonic). NEC, Motorola, (e.g. solution Linux is an „ manufacturers device of limitedamount a Only

§ §

§ § …… ... 39 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 40 Android - 10.0 collabora Version Version Alliance (OHA) in 2007in Handset

Mobile G1 -

T September 2019: October 2008: First commercially Android: running available phone established Android based on modified version of Linux kernel ted to develop and release Android. Open Google and other members of the of members other and Google Alliance Handset Open

§ §

§ § …… ... 41 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 42 Devices Windows CE, Pocket PC, Pocket CE, Windows Pocket PC Phone Edition, Mobile …… ... 43 History [Hpcfactor2010] Windows CE, Pocket PC, Pocket CE, Windows Pocket PC Phone Edition, Mobile …… ... 44 Overview Mobile based) - independent mobile OS mobile independent - countermeasures

Microsoft Windows Phone / 10 10 / Phone Windows Microsoft OS Firefox KaiOS Embedded Linux Embedded Alliance) Handset (byOpen Android Mobile Edition, Phone PC Pocket PC, Pocket CE, Windows Microsoft Overview (bySymbian Foundation) Symbianplatform Overview OS Palm Apple iOS (Unix

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 45 Microsoft Windows Phone 7 Phone Windows Microsoft technically a new a technically

Mobile interface user New backward compatibility backward Aimed at consumer market instead of enterprise market unlike Windows platform, but and different platform without Launched in October and November 2010 Successor to Windows Mobile

§ §

§ § …… ... 46 7 Microsoft Windows Phone 8 Phone Windows Microsoft

Latest release: Windows Phone 8.1 2014 April in Successor to Windows Phone Windows Phone 8 launched in in launched 8 Phone Windows October 2012 together with optics similar with 8 Windows

§ § §

…… ... 47 Microsoft Windows 10 Mobile 10 Windows Microsoft

since March2016. since devices can receive updates receive can devices Other eligible Windows Phone Phone Windows eligible Other and 36 Lumia models. Lumia 36 and phones include HTC One (M8) (M8) One HTC include phones November 2015: Supported Previewavailable 2015. July in Windows 10 Mobile Insider

§ § …… ... 48 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 49 Firefox OS Vivo ) profit organizationknown profit - 10 - userprivacy ceased brand brand Technologies ) , a non a , 08) - Acadine Telefónica in Poland by Deutsche Telekom (also sold in in sold (also Telekom Deutsche by Poland in Congstar Mozilla Telefónica source mobile OS for smartphones OS for mobile source and tablet - KaiOS up: H5OS by in Brazil by by Brazil in - in Spain by by Spain in Fireweb to form form to release: 2.2.0 (2015 release: basedopen 12: Mozilla announced to stop offering smartphones 09: Mozilla work on Firefox OS Firefox workon 09:Mozilla 02: Firefox OS first publicly demonstratedOS first publicly 02:Firefox OS based phones launched: Firefox 07:First commercial - -

- User data will be analysed locally on the device, not transferred to servers,exploited traded.or pick Possible LG LG Upon installation of applications, a reason is stated why certain rights user. the by granted be to need and necessary are - - ZTEOpen Fire Touch One Alcatel Germany by subsidiary

§ § § § § § Forked Latest version: Latest2.6.0 (2015 developer 2016 2015 channels. operator mobile through Mozilla expressedstrong positionon Mozilla 2013 Focus on open standards, open on Focus HTML5 e.g. applications 2012 Originally developed by developed Originally browser web the Firefox for Linux computers

§ § § §

§ § § § §

§ § …… ... 50 Overview based) - independent mobile OS mobile independent - OS

§ § § § § § § § § § §

Attacks and countermeasures Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... - 51 /product/nokia KaiOS www.zdnet.com 4g/ - :// Source: Source: https 8110 priced priced based - - . apps India while Android million in cash to million OS. , enables users to users to enables shippedin Asia, based - company $ 7 $ OS KaiStore based - US devices were were devices a million in the Fi with HTML5 Fi with - memory. also invested also 05) - Jio KaiOS resource usage, and is able to run on on run to able is and usage, resource . US $ 22 2019 ( on Linux on Linux , GPS and Wi Technologies, 2.6.0 71%: VoLTE applications stake. driven successor of Firefox attributedthe competitively popularityto of - KaiOS Phone. by from B2G (Boot to Gecko), an open source release: release: Q1 2018, 23 million supports: dedicated app marketplace called beat Apple's iOS for second place in India place second iOSfor beat Apple's argely argely n

Lightweight hardware hardware Lightweight devices with just 256 MB of Africa, Middle East, Latin Middle and America, Africa, North America. E, 4G LTE A download L Jio I

wned § § § § § orked orked Latest Latest KaiOS KaiOS dominateswith telecom operator Reliance Reliance operator telecom uppick 16%a 2017: Initial release 2018: Google invested F community A mobile OS based based OS A mobile O

§ §

§ § § § § …… ... 52 Overview based) - independent mobile OS mobile independent - countermeasures OS

§ § § § § § § § § § §

Attacks and Manufacturer

The market for mobile devices and mobile OS Mobile OS unavailable to other device manufacturers

§ § § …… ... 53 Current from threats malware on mobile OS party software: party - rd Malware can be executed on mobile operating leaks by security or either intentionally systems, (exploits). system operating mobile the inside Shorter battery runtime (more processing/resource usage) Loss of data (malware erasing data) Loss of money (e.g. malware sending SMS to premium services ) Device malfunction Device

§ § § § Ø Possible threats for the user are: user the Possible threatsfor Many mobile operating systems allow the the allow systems operating mobile Many 3 of execution

§ § …… ... 54 Timeline [ATD2013] PDA/mobile threats SMSMailer Card exploit Card - of mobile malware mobile of

Telefonica : First Symbian:OS First malware : Liberty HorseTrojan :Liberty : SMS unwanted sends :Flooder devices Palm on data erases :Phage :Nokia V

Most popular target: Android target: Mostpopular The number of malware programs masquerading as legitimate aslegitimate masquerading programs malware of number The … 02/2003 09/2004 09/2001 08/2001 09/2000 12/2000 § mobile apps grew by more than 600 percent in 2012in 600 percent than more by grew apps mobile § Strong growth § § § § § § § Beginnings Beginnings of mobile malware …… ... 55 2016 - [Sophos2016] 2004 Timeline mobile threatsTimeline mobile …… ... 56 2011 - [Sophos2016] 2004 Timeline mobile threatsTimeline mobile …… ... 57 2016 - [Sophos2016] 2012 Timeline mobile threatsTimeline mobile …… ... 58 Symantec2018] [ Mobile threats in numbers in threats Mobile …… ... 59 McAfee2019] [ Mobile threats in numbers in threats Mobile …… ... 60 major major are are “attack landscape” Further trends in the service). - of ). softwares - denial -

Apps and security vectors. attack States attack mobile devices upfront Apple(e.g. vs. FBI Mobile devices may get „recruited“ for for „recruited“ get may devices Mobile attacks. executing services for “customers” (e.g. (e.g. “customers” for services distributed Attacks are becoming commercial

§ §

§ § …… ... 61 2016 - [McAfee2016] 8 Mobile threats Mobile McAfee Labs 2016 e: c 9M 1M 3M 9M r trust score Malwares ou over 6 months Apps with bad S Suspicious apps Devices were affected were Devices 37M 150M within 6 months in 2015 in months 6 within otal count of malware of otal count T detected over 6 months period in over 190 countries period in over 190 Apps scanned on client in last three month three in last Apps scanned on client 1M Over Inside McAfee Labs: The Magic Numbers Behind the App Stores The Magic Numbers Behind Inside McAfee Labs: devices over 6 months devices Bad URLs on 4 million found McAfee Labs routinely scans major app stores for infected systems as well as apps with suspicious behavior. infected for scans major app stores Labs routinely McAfee Dangers on the App Stores App the on Dangers During the past year, there have been hundreds of apps pulled from both GoogleApple Play App and Store the for security reasons. For iOS, the biggest threat this yearoverly aggressive came adware, from whereas apps Google Play sawwith a fair number of apps infected with malware. been very have app their associated from apps malicious and Apple remove quick to Google Both process. the screening through still slip apps will infected that some inevitable it’s however stores, Over the past six months, McAfee Labs has crawled through the app stores checking for security results: interesting a number of returned issues and

inside images to avoid inside images to avoid detection. Play were discovered to discovered were Play with “Android. be infected which hides Xiny.19.origin” (APKs) executables Android During the writing of this During the writing of this report, 60 Android over games hosted on Google There’s always always There’s something new: Mobile Threat Report: What’s on the Horizon for 2016 on the Horizon for Report: What’s Threat Mobile …… ... 62 1] - [Hatamian2019 World Examples World - Mobile threats Mobile Real . week behaviour analysis of top 10 10 top of analysis behaviour week -

real behaviour) real Transferring data to outside EU (GDPR issue). Promises did not match actions (privacy policies Vs. They transmitted sensitive data to remove servers user’swithout knowledge. They accessed sensitive data while users were not devices. with interacting

§ § § § Android fitness apps revealed: A one § …… ... 63 2] - 3 users Risk [Hatamian2017 to to communication communication Countermeasures Analyser Consumers’ Perspective Consumers’ risks 2 potential potential Analysing Behaviour privacy privacy ' for apps

A3: Android App Android A3: behaviour

§ Responsible monitoring …… ... 64 2] - [Hatamian2017 Countermeasures Analyser Consumers’ Perspective Consumers’

Behaviour A3: Android App Android A3: § …… ... 65 3] - [Hatamian2019

Countermeasures

Corporate’s Perspective Corporate’s

ESARA: A Framework Enterprisefor Smartphone A ESARA: Assessment AppsRisk § …… ... 66 measures Technicalsecurity precautions and and precautions

Virus scanners Virus Firewalls Checkingcertificates Proof Carrying Code Definitionaccessof rights and monitoring theirof enforcement. Encryption control Access Processes are not able to access the memory of otherprocesses.

§ § § § § § § §

Additional security software may be needed, e.g. needed, may be software security Additional Code integrity management: Integrity of programs is checked before before is checked programs of Integrity management: integrity Code e.g. by started are they Support for security modules security for Support I/O Secure Access controls Memory protection Memory protection File

§ § § § §

§ § …… ... 67 Accesscontrol Accessing a peripheral device Reading a file Reading file a Writing

§ § § actions, which they are allowed to. allowed are they which actions, The OS The controls that userstheprocesses or those execute only can user, a by started Every user hascertainuser assignedEvery access rights, e.g.

§ § …… ... 68 s ’ Print Device periphery Accessmatrix Read Read Write File 3 Execute Read File 2 Read Read Write File 1

Object U4 U3 U2 U1 User …… ... 69 - - - 2017 03. , FAIR: - grew - 09 . "A2019. - Igler smartphone - 2019 s 06 - - 12 TrustBus u - 26. - malware - 11 - SEC - 12 Literature - 11 , B. and the - APF 2019 APF - Apps, Apps, Rannenberg IFIP IFIP . "ESARA:2019. A mobile - winning 26. - finds - - Rannenberg 11 - Rannenberg accessed 2013 Assessment, Assessment, study - Risk Risk , L. Fritsch, K.and , Olvera, K. store/, - - Changes to supported content types in the the in types content supported to Changes Momen nokia , accessed , 2013 accessed - 22 - , J. Serna , S. and K.Paper, , N. the - 11 most/ - in - - /newsroom/id/3788963 types Hatamian Hatamian Hatamian - android . s Winning the Market?, U.S. Smartphone - ‘ M. M. 1] M. 2] M 3] - - - Who content - targets - . Juniper Study Finds Mobile Malware Grew 600 Percent, Targets Android 03 www.gartner.com .html, 2013 accessed - - 09 - percent - supported - Nielsen 2013] 2013] Nielsen Hatamian2019 Hatamian2017 Hatamian2019 [Nokia2013] Nokia Developer News: http://developer.nokia.com/Blogs/News/blog/2013/10/04/changes Store, Nokia to Framework for Enterprise Smartphone Apps [ http://www.nielsen.com/us/en/newswire/2013/whos market [ Apps", Android for Method Analysis Impact Privacy Multilateral [ Fuzzy Alarming Index Rule for Privacy Analysis in Smartphone [ https:// 2014 accessed www.hpcfactor.com/support/windowsce, [Hpcfactor2010] accessed http://commons.wikimedia.org/wiki/File:Windows_CE_Timeline.png, 2014 [Gartner2016] Gartner Group (2016), Gartner Says Five of 10 Top Worldwide Mobile Phone Vendors Increased Sales in Second Quarter of 2016 2016 accessed http://www.gartner.com/newsroom/id/3415117, [Gartner2017] Gartner Group (2017), Gartner Says Demand for 4G Smartphones in 2017 of Quarter in Second Growth Spurred Markets Emerging Most, http://allthingsd.com/20130626/juniper Most, 600 [Gartner2015] Gartner Group (2015), Gartner Says Worldwide Smartphone Sales 2013 Since Rate Growth Slowest Recorded 2015 accessed https://www.gartner.com/newsroom/id/3115517, [ATD2013] § § § § § § § § § § …… ... 70 - - - 07. - - - 2015, 10 der - - - absatz der der - - - - malware - von von mobile 07. 20. - - - 07. 05. Literature - - 10 Absatz 09 07. 2016, - - 10 11 - - - 10 am - 2009/, accessed 2014 Quartal - 3. zum quartal - . 4 - 05 bis - Betriebssysteme usa/, accessed 2014 accessed usa/, - seit 11 - - 2009 den - in quartalen/, accessed 2015 quartalen/, accessed 2014 - - - quartalen/, accessed 2014 - führenden Quartal hersteller us/medialibrary/PDFs/other/sophos nach nach - - - - der 1. nach - , accessed , 2015 accessed vom smartphones - , Malware Goes Mobile: Timeline of Mobile Threats, 2004 smartphone fuer - hersteller - - Marktanteile Sophos der weltweit - betriebssysteme betriebssysteme - - infographic.pdf - smartphone - Symbian2006] symbianblogs.com/history.html, accessed 2011 accessed symbianblogs.com/history.html, Symbian2006] Smartphones Smartphones http://de.statista.com/statistik/daten/studie/73662/umfrage/marktanteil smartphone [Statista2014d] http://de.statista.com/statistik/daten/studie/173048/umfrage/weltweiter der [Statista2015] http://de.statista.com/statistik/daten/studie/77324/umfrage/marktanteile betriebssysteme [Statista2014c] http://de.statista.com/statistik/daten/studie/173056/umfrage/weltweite marktanteile [Statista2014a] http://de.statista.com/statistik/daten/studie/73662/umfrage/marktanteil smartphone [Statista2014b] [Sophos2015] https://www.sophos.com/en timeline [ § § § § § § § …… ... 71 - - - in den den in der der - - 201201 - Accessed Nutzung in den in den Nutzung Nutzung Nutzung in den in den Nutzung - - - 2018. monthly 05. - Literature 11 . - Smartphone systems der an operating usa/, accessed 2015 accessed usa/, - share/mobile/worldwide/# - den mobile - in sales to end users from 1st quarter 2009 to 3rd sales 2009 to 1st usersquarter end from quartalen/ of - - Internet Security Threat Report, Report, Threat Security Internet Betriebssysteme – market Comparison_of_mobile_operating_systems - / 2017 nach 2015. der - wiki / Juli smartphone Comparison smartphones bis - fuer Symantec, ISTR ISTR Symantec, - 2011 Marktanteile der führenden Betriebssysteme am Absatz von Absatz am Betriebssysteme führenden der Marktanteile Marktanteile Marktanteile der Betriebssysteme an der Smartphone der an Betriebssysteme der Marktanteile betriebssysteme ] Mobile Operating System Market Share Worldwide - Januar 12. en.wikipedia.org - 12 - Symantec2018] Symantec2018] Statista2017b] Marktanteile der Betriebssysteme an der Smartphone der an Betriebssysteme der Marktanteile Statista2017b] Statcounter 2016 201907 [ [Wiki2016] Wikipedia, https:// [ USA von bis2011 Januar Juni [ https://gs.statcounter.com/os [Statista2016b] Global quarter 2016, by operating system (in million units). [Statista2016c] USA von bis2011 Januar Oktober 2016. [Statista2016a] 2016. Quartal 3. zum bis 2009 Quartal 1. vom weltweit Smartphones https://de.statista.com/statistik/daten/studie/73662/umfrage/marktanteil smartphone [Statista2015a] USA von http://de.statista.com/statistik/daten/studie/77324/umfrage/marktanteile betriebssysteme § § § § § § § §