28 Jun 2011
Apple's iOS platform has 182 more known vulnerabilities at present than Google's Android OS, according to security firm Symantec.
The Window Into Mobile Device Security white paper analysed the Apple and Android platforms to determine their resistance to threats from malware, phishing, spam and data loss.
"Security researchers discovered roughly 200 different vulnerabilities in various versions of the iOS operating system since its initial release. Of these, the vast majority were of lower severity," said Carey Nachenberg, vice president and fellow at Symantec.
"The remaining handful of vulnerabilities were of the highest severity and, when exploited, enabled an attacker to take administrator-level control of the device, granting them access to virtually all data and services."
However, Apple's overall security is still considered to be very high, largely due to the built-in encryption and the firm's stringent application vetting process.
"IOS' encryption system provides strong protection of emails and email attachments, and enables device wipe, but thus far has provided less protection against a physical device compromise by a determined attacker," Nachenberg said.
"Apple vets every single publicly available app. While this approach can almost certainly can be circumvented by a determined attacker, it has thus far proved a deterrent against malware attacks, data loss attacks, data integrity attacks and denial-of-service attacks."
It was also found that Apple's mobile operating system is immune to traditional types of computer viruses and worms, but there is currently no protection to combat social engineering attacks in the form of phishing or spam, Nachenberg warned.
Latest stories from Software
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
V3 examines the key strengths and weaknesses of Samsung's latest iPhone killer
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Ihre Aufgaben Sie sind zuständig für die Beratung...
***MS Visual Basic Programmierer mit Oracle DB-Erfahrung...
IT Business Analyst Location: London, but...
Senior Software Developer Company overview...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Misleading headline
So the bigger issue here isn't the number of vulnerabilities, but the impact of those vulnerabilities and whether you hold an iron grip on your developer community. Got it!
Posted by: EJ 30 Jun 2011
read the original Symantec article
If you read the original article insteadof this fictional bull you will see iOS is far more secure than Android. This article is simply a bunch of lies from a fanboy liar.
Posted by: Dan Smith 29 Jun 2011
Seriously, why bother publishing this stuff?
Apple published - and fixed - more "known vulnerabilities" than Android, and a sensationalist Fox News-style headline makes it sound like Apple has an unsecure platform. Pathetic manufacturing of news where there is none...
Posted by: Yoda 29 Jun 2011
Except that...
"This has only recently been addressed with the incorporation of AES-256 encryption in the Honeycomb 3.0 release." Save that the vast majority of Android devices don't actually run that.
Posted by: RattyUK 29 Jun 2011
Exploits are the important issue though
Of course Exploits are where the rubber hits the road. With well over 100 malware apps mostly hosted from the Android Marketplace itself and hundreds of thousands of users affected, Android has already shown itself to be vastly more malware-riddled than iOS which has a grand total of zero instances of malicious software through the App Store. Add in the fact that 45% of apps in the Android Marketplace are spamware and the Android story gets even worse. -Mart
Posted by: Martin Hill 28 Jun 2011
Android has Mny more vulnerabilities
I don't know how Symantec came up with only 18 vulnerabilities in Android considering this: "A shocking number of high-risk security flaws in Google's Android smartphone OS have recently been discovered by security firm Coverity. "We found 88 high-risk defects in Android," it says in the firm's 2010 Open Source Integrity Report. "25% of the Android defects discovered, including memory corruptions, memory illegal accesses, and resource leaks, are considered high-risk with significant potential to cause security vulnerabilities, data loss, or quality problems such as system crashes." The report is based upon the source code analysis of the Android kernel 2.6.32 (code named “Froyo”), and they have discovered 359 flaws in total." -Mart
Posted by: Martin Hill 28 Jun 2011