Android 4.1 Jelly Bean OS is the most secure version Google's mobile operating system so far, according to security researcher Jon Oberheide.
Oberheide, chief technology officer of DUO Security, said that Jelly Bean is the first version of Android OS that has properly implemented address space layout randomization (ASLR).
Android has always been an attractive target for kernel attackers. But, Jelly Bean has the data execution deterrence technologies. In addition its has ASLR that makes it difficult for hackers and malware traders to exploit memory corruption vulnerabilities in the OS as they can just guess at where their malicious software will load because of the fact that memory mapping for OS processes are randomized.
Oberheide noted that Ice Cream Sandwich was the first version of Android OS to implement ASLR technology, but it was not done perfectly and thus it failed to allay enough real-world attacks.
Commenting about the Jelly Bean OS, the security researcher said, "In Jelly Bean most binaries are now compiled/linked with the PIE flag, which means the executable mapping will be properly randomized when executed."
But, Oberheide also pointed to some weak spots in the 32-bit ASLR that Google is using in the newest version of its Android OS. He said Apple's integration of an even more secure form of the technology dubbed in-kernel ASLR in the iOS 6, would likely become the new security gold standard for mobile operating systems.
The massive, glitzy Broadway production which Samsung staged when it announced its latest handset in the Galaxy line - the Galaxy S4 smartphone - led to a controversy of sorts over the company's supposedly sexist product releases.
Earlier...
According to the latest global climate leadership review released by the Climate Institute on...
China-based device manufacturer ZTE has recently revealed that it has worked out a "strategic...
According to reports, bigwig global wireless distributor Brightstar is BlackBerry's `mystery partner' that has placed an order for 1 million BlackBerry Z10 smartphones.
BlackBerry has said, in an announcement a couple of weeks back, that...
According to latest statistics released by the AAA and Oil Price Information Service (OPIS), the...
According to some wild rumors making rounds about the Google Nexus 5 handset, the specs list and...
Earlier this week, French regulator ARCEP revealed that it is reporting Microsoft's Luxembourg-based Skype subsidiary to the Paris prosecutor over the company's failure to register as a telecom operator in accordance with the country's law; a...
In a new funding round led by Swedish group, Proventus...
According to a Monday blog post by Adam Cahan, Yahoo's...
A high-tech kabuki theatre, dedicated to the 400-year-...
In a recently-introduced bill, legislators in Ohio have...
© 2011 AustrianTribune - Tribune Online Services. All times CET (GMT + 1.00).