App computer storage vender require to collaborate more closely to keep smartphone users good , including putting together a system of rules for grading lotion security , according to E.U. cybersecurity agency ENISA .
On Tuesday , the federal agency published a report detailing defense measures it feels app store owners postulate to implement to keep user safe .
These step include a young security department focused report chemical mechanism , which would cumulate views and grades on how a developer or app has performed from a security point of aspect . Today , there is no way of life for a exploiter to find out how strong an app program is and to what extent it has been jibe for vulnerabilities , which is a concern , according to ENISA . Instead users charge per unit applications for their functionality , ENISA wrote .
Implementing such a military rating would also motivate developers to cogitate more about security system .
“ Currently , there is no bonus for , for example , Android developer to gift a lot in security , because their apps will be number with less secure apps that were grow in one day by amateur , ” said Marnix Dekker , who co - authored the report .
The mechanics would work better if it was implemented across many app stores , which mean vendors would have to cooperate . Today , there is no collaboration across the protection teams at the dissimilar app stores , accord to Dekker .
“ That is counterproductive and not very efficient , ” said Dekker .
ferment together they should also seek to fare up with a more common way of handling patches , Dekker articulate .
The paper does n’t grade the security in exist app stores , Instead it detail what measures should be in office to keep them as secure as potential . Besides a organization for grading security it highlight the want for app review and the possibility to polish off applications , using a so - called kill - switch .
“ We see a act of raw app stores being set up , and just because they are not that pop or have a big market share we still believe it is important that security is addressed in the same strict way as has been done by the bigger app memory board , ” said Dekker .
The twist security is also key , including how applications run on the smartphone , preferably in a sandbox with limited privileges , and from where they can be installed .
Smartphone vendors have to find a balance between confine software package downloads from untrusted sources and being overly restrictive , which could encourage users to jail - gaolbreak and peradventure introduce higher risks , according to the account .
This is another orbit that could benefit from vender cooperating .
Today , drug user that want to download applications from Amazon ’s Appstore for Android have to allow untrusted source , which could allow a drudge to send an e - mail to a exploiter saying that they should download this coolheaded app , and then take over the phone , according to Dekker . Here users would benefit if Amazon as well as other licit third party app stores and Google could follow together , he sound out .
Smartphone security is catch more and more attention from vender and authorities . In June , Symantec published a report comparing the security measures in comparison Android and iOS security .
The latter won the most categories , but neither was very good at protecting against phishing , Symantec said .
