{"id":30212,"date":"2015-11-26T11:25:08","date_gmt":"2015-11-26T05:55:08","guid":{"rendered":"http:\/\/www.tothenew.com\/blog\/?p=30212"},"modified":"2015-11-26T15:13:04","modified_gmt":"2015-11-26T09:43:04","slug":"android-6-0marshmallow-whats-new-in-security","status":"publish","type":"post","link":"https:\/\/www.tothenew.com\/blog\/android-6-0marshmallow-whats-new-in-security\/","title":{"rendered":"Android 6.0(Marshmallow) : What’s new in Security"},"content":{"rendered":"

Android has been the most used mobile operating system till date. With the huge base of end-users, Android has been guilty of hosting numerous security related bugs in the past. With the latest version of Android 6.0 namely Marshmallow being released, I expected to see a few changes in the security\u00a0model.<\/p>\n

Change in the permissions model<\/span><\/h3>\n

In the versions of Android prior to Marshmallow, apps used to declare the permissions (install time permissions)<\/strong> they will require to the application manifest and then post installation, they were able to make use of these permissions without any need for user’s explicit permission. But now, a secondary notification has been added to the user. This will mandate the user’s permission when an application would look to access data (run time permissions)<\/strong> or functionality even if the application is a Google application. This will create an added layer of security for Android and will be helpful in stopping applications that invade our privacy.
\nHence, the replacement of the existing install time permissions<\/span>\u00a0approach with the run time permissions<\/span> approach will make sure that the user is prompted for permission each time the application accesses some data.
\n\"howtogeek\"<\/p>\n

Source:\u00a0howtogeek.com<\/h6>\n

 <\/p>\n

Setting the individual application permissions<\/span><\/h3>\n

The settings will have an option to “turn on” and “turn off” individual application permissions inside the \u2018Apps\u2019 menu or from the \u2018App Info\u2019 screen. This will enable us to use an app, even if we are \u00a0concerned about the application having access to certain permissions, we can easily grant or revoke the permission by the use of the slider\u00a0button in settings.
\n\"pcworld.com\"<\/p>\n

Source: computerworld.com<\/h6>\n

 <\/p>\n

Encryption enabled Device<\/span><\/h3>\n

Encryption will be enabled on Android devices by default. The new devices that come with Marshmallow will have encryption enabled by default with a necessary condition being:
\n– AES crypto performance above 50MiB-per-second<\/p>\n

The devices which fulfil the above-mentioned criteria will be enabled with encryption of the private user data partition\u00a0and the public data partition which resides in \/data<\/span> and \/sdcard<\/span>\u00a0respectively.<\/p>\n

\"engadget.com\"
\nSource:\u00a0engadget.com<\/h6>\n

More details can be found in\u00a0Android 6.0 Compatibility Definition Document (CDD)<\/a>.<\/p>\n

Android security patch level<\/span><\/h3>\n

\"Blog<\/p>\n

Source: arstechnica.com<\/h6>\n

A new field \u2018Android security patch level\u2019 is added in the latest version of Android. It can\u00a0be found in the \u2018About Phone\u2019 settings. This would be a better indicator for users so as to understand what is the up-to-date level of their device. In the earlier versions, there was some build number, but with the introduction of this field the patch level is represented in a much more meaningful month\/day\/year format.
\n\"Blog<\/p>\n

Source:\u00a0Android 6.0 Compatibility Definition Document (CDD)<\/a><\/h6>\n

 <\/p>\n

“It should make it really simple for users to understand the state of the device. The feature is part of Android’s attempt at making sure that security information and patch level information is available to users”<\/em><\/p><\/blockquote>\n

–\u00a0Adrian Ludwig, the lead security engineer for Android<\/p>\n

It will be interesting to see how these security features pan out once devices start getting Marshmallow update.<\/p>\n

To\u00a0know more go through our mobile application security services<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Android has been the most used mobile operating system till date. With the huge base of end-users, Android has been guilty of hosting numerous security related bugs in the past. With the latest version of Android 6.0 namely Marshmallow being released, I expected to see a few changes in the security\u00a0model. Change in the permissions […]<\/p>\n","protected":false},"author":166,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":5,"footnotes":""},"categories":[2026,1],"tags":[2791,2790,2788,2794,2789,2792,2797,2800,2799,2796,2795,227,2798,2793],"class_list":["post-30212","post","type-post","status-publish","format-standard","hentry","category-appsec","category-technology","tag-android-6","tag-android-6-0","tag-android-6-0-marshmallow","tag-android-encryption","tag-android-marshmallow","tag-android-security","tag-android-security-patch-level","tag-application-permission-model","tag-application-permissions","tag-default-encryption","tag-full-disk-encryption","tag-grail-security","tag-individual-application-permissions","tag-mobile-security"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t