Defeating SEAndroid
Pau Oliva Fora details defeating SEAndroid PAU OLIVA FORA SR.
Summary
Architecture and Background
Defeating SEAndroid PAU OLIVA FORA SR. MOBILE SECURITY ENGINEER, VIAFORENSICS Security Enhancements for Android (SEAndroid) enables the use of SELinux in Android in order to limit the damage that can be done by malicious apps, trying to make exploitation harder.
Vulnerability Analysis
Some OEMs are trying hard to implement extra mitigations in their devices, especially those aiming to reach the enterprise market. We will present some issues that are found in devices currently implementing SEAndroid, and demonstrate how vendors FAIL in properly implementing SEAndroid protection.
Exploitation and Demonstrations
Pau Oliva (@pof) is a Mobile Security Engineer with viaForensics. He has previously worked as R+D Engineer in a Wireless Provider.
Remediation and Defensive Strategies
His passion for smartphones started back in 2004 when he had his first PocketPC phone with the Windows Mobile operating system and started reverse engineering and hacking HTC devices. He has been actively researching security aspects on the Android operating system since its debut with the T-Mobile G1 on October 2008. Pau is co-author of Wiley's Android Hacker's Handbook. Materials:
Related talks
Main Stage·23 min
Craig Young
Craig Young details android WebLogin: Google's Skeleton Key CRAIG YOUNG VERT SECURITY RESEARCHER, TRIPWIRE Millions of businesses worldwide trust in Google Apps to run their organization's domain.
Main Stage·19 min
Jaime Sanchez
Jaime Sanchez details building an Android IDS on Network Level JAIME SANCHEZ A3SEC Being popular is not always a good thing and hereís why.
Main Stage·47 min
Tony Trummer · Tushar Dalvi
Tony Trummer and Tushar Dalvi unveil QARK (Quick Android Review Kit), an open-source static code analysis tool that automatically finds and builds proof-of-concept exploits for Android apps.