Endpoint Security Complete

 View Only
  • 1.  MobileSecurity for Android, how does it work?

    Posted Oct 18, 2012 10:52 AM

    The customer is now testing Mobile Security Solutions of 3 Vendors - Symantec, Mcaffee, ESET. They have tested realtime scan with the Eicar virus test file. Other Vendors have detected the test file during the download, Symantec Mobile Security NOT. Symantec mobile security has detected the Eicar only when it was downloaded through the Google Market.

    Could you please help me with this question. I would need a detailed explanation, how does it work.

     

    thanks alot

     

    Rudolf



  • 2.  RE: MobileSecurity for Android, how does it work?

    Posted Oct 18, 2012 12:37 PM

    Hi Rudolf,

    Thanks for the forum question.  I have downloaded eicar from the www.eicar.org website and it is detected on my Symantec Mobile Security 7.2 SP1 Android device during scans.  What exact file is being downloaded, and in which location is it being stored?  (Mine is just in Downloads.) 

    SMS 7.2 will scan apps upon install and determine whether they match any known Android malware, and also if they match any known blacklisted apps configured by the administrator. 

    Let me know if more info is needed!  &: )

     

      
     



  • 3.  RE: MobileSecurity for Android, how does it work?

    Posted Oct 18, 2012 02:21 PM

    Hello Mick,

     

    thanks alot for you answer. So the malware will be detected only by the scheduled/on-demand scans. There is no auto-protect on the Android? My question is why, because other vendors have this functionality.

     

    thanks



  • 4.  RE: MobileSecurity for Android, how does it work?

    Posted Oct 18, 2012 05:07 PM

    Hi Rudolf,

     

    I'll let the developer members of the forum answer the "why" questions.  I can run a SDK debugger, but stake no claims about understanding everything that is going on within the Android OS and what the implications are for feature availability.  &: ) 

     

    I'm most familiar with Symantec products, but a bit of Internet searching shows that real-time / auto-protect is not standard among all the Android AV products on the market.  Auto-Protect is included on the Symantec agent for Windows Mobile which comes with SMS 7.2, but the engineering behind that OS and Android is completely different.

     

    Here's a couple screenshots, BTW, of SMS 7.2 on Android picking up (during a manual scan) the EICAR files downloaded from eicar.org: first discovery the confirmation for removal....

    And then a "no problems found" screen after removal: 

     



  • 5.  RE: MobileSecurity for Android, how does it work?

    Posted Oct 19, 2012 02:19 AM

    Hello Mick,

     

    thanks for you answer ;)

     

    Rudolf