Survey on Security in Android

Abstract

Android OS has become one of the most famous mobile phone OS which is continuously deployed by many smartphone mobile devices assemble for a range of platforms.in this world after the internet and computers smartphones is the third revolution, On the downside, Android is also very fast becoming platform for security attacks. Android security have been based upon a privilege-based mechanism that prohibit access of third-party Android apps to demanding assets on an Android smartphone device. Android apps runs over permission-based structure in which each app`s access is managed according to the permission that it achieves during installation. However, present research shows that android privilege framework is inherently by design are weak and privileged permissions can be got by malicious operation by fire privilege escalation attacks. by these attacks, an application may get privilege to perform a privileged task which it is not authorized. In this review paper, we examine the arising concern in Android OS security, covers Excess Privilege Attacks, conflict attacks, inefficient permission administration, overclaim of privilege, privilege escalation attacks, and TOCTOU (Time of Check to Time of Use) attack, spyware etc. We also discuss ways to detect it.