Risks of information leaks from mobile devices

Abstract

The article covers mobile application security threats, mobile operating system (OS) vulnerabilities, information leakage channels, semantic security, infrastructure-related security, and more. It noted that security breaches can be mitigated through improved security behaviors and attitudes, not just better technology. By default, both Android and iOS apps have been shown to be able to access sensors such as accelerometer and gyroscope, microphone and camera while running in the background without the user's knowledge or consent. The risks of information leakage as a result of granting system access rights to applications with root rights, updating the system with firmware containing malicious programs or vulnerabilities that can be used by attackers have been analyzed. The methods of intercepting control of mobile devices using Smurf Suite tools, phishing technologies, etc. were analyzed. Practical recommendations for reducing security risks when using mobile applications are offered for both users and developers. Benefits of using Apple Neural Engine and custom CreateML models on iOS mobile devices to process data directly on the device to avoid lengthy and potentially risky calls to a remote server.