Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Will We Eventually Need a Budget Line Item for Cybercrime? | Main | IRS Faulted for Application Vulnerabilities »

Android Kill Switch and Shifting Boundaries Between Vendors and Customers

In an earlier post I argued that Google shouldn't be yanking applications off our Android phones but at the same time we need to be cognizant of the potential threats from malware. The more I think about this the more I see the distinction between hosted services and private services blurring.

First, I need to clarify an earlier post on the Android kill switch. The kill switch will remove only programs installed from Android Market, not others users have downloaded from the Web. If an application turns out to be a Trojan, Google reserves the right to remove it.

This isn't too far removed from an application host provider removing malicious code from one of its servers running your applications. It definitely isn't the same thing but it's close enough to raise the question of how boundaries between users, vendors and service providers may shift with new deployment technologies.

For another perspective on the Andriod kill switch that comes to similar conclusions about malware see David A. Sampayo at Technologizer's thoughtful post on the difference between the Andriod and iPhone kill switches in which he concludes:

Overall, I would compare Google's decision to remotely disable troublesome apps more to its malware detection service than to Apple's kill switch.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/913

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net