Hardening Android Dual Boot for Enterprise Usage

Please log in to watch this conference skillscast.

The need for root exploits to gain full control of Android systems gives attackers easy to use tools which can be included in malware – you could pack an existing exploit into an app in as few as three hours!

To harden Android devices for enterprise usage, zertisa is developing a multi-boot Android system based on Linux containers. By design, this abstraction layer does not offer more security – exploits that run in one container can easily infect the host system, and breaking out of the container is only a matter of mounting the right partition. So, how do you solve this problem?

To securely use such a system, Janosch Maier will propose the following:

• Each container uses its own kernel to prevent the spreading of root-kits between containers

• The containers use SEAndroid policies to complicate the use of root-exploits to break out

• Each container is encrypted to complicate physical attacks

• The use of SEAndroid promises the best increase of security. Though such measures are essential to prevent container break-outs, their use is not limited to dual boot solutions, and luckily are by now merged into the Android AOSP.

Find out how to apply these methods and fully protect your app - watch this video from Droidcon London now!

YOU MAY ALSO LIKE:

• Accessibility in Flutter (SkillsCast recorded in August 2020)
• Skills Matter droidcon London 2019 Wrap Up! (SkillsCast recorded in October 2019)