3 ms·

Anyone know what the state of AV on android is? $employer requires ESET on all windows machines, and I'm trying out the android app now. It doesn't seem to make

Anyone know what the state of AV on android is? $employer requires ESET on all windows machines, and I'm trying out the android app now. It doesn't seem to make my phone any slower...

veeti 9y ago
Utterly worthless, because apps on Android are sandboxed. Third-party AV can't do anything useful, and Play Services already provides built-in app scanning.
- icebraining 9y ago
  Devil's advocate: there are APK extractors (which work without root), so it's definitively possible for an AV to scan those files and report if there's something weird.
- yellowapple 9y ago
  An AV on a rooted phone would not have that restriction. Seeing as how rooting significantly increases the probability of malware infection on Android, such an AV would also be installable when it's needed the most.
avar 9y ago
I used to work for an AV vendor and we sold AV for the likes of Linux, Solaris, AIX etc. Now, that can be directly useful for e.g. mail or file servers on those platforms, but a lot of customers simply had to buy AV everywhere for compliance reasons. They'd be running the AV scan in cron checking for Windows viruses on AIX. Discussions with those people were funny. They knew what they were buying was worthless and made that clear, we knew our product was worthless to them and made that clear. But their boss's boss had obligated them to buy AV, so sure, if they wanted it anyway we were going to make it and take their money. I suspect Android AV exists for much the same reason.
- yellowapple 9y ago
  Android is a bit of a different situation: - Android "administrators" (read: end users) are generally less likely to be cognizant of potential viral vectors than a traditional Linux/AIX/Solaris/etc. administrator. - Android is capable of providing root access to applications should a user configure the device to do so, thus giving malicious software an avenue to break out of what's otherwise a pretty decent per-app sandbox. This is a concern due to the point above. - Variation between Android installations (as far as malware authors might be concerned) is far less than the variation in Linux/Unix installations (especially server installations), so there's a higher probability of one exploit or vector being applicable elsewhere. - Pirated software is more common on an Android device than on a Unix server. A good AV solution on Android is therefore valuable, especially considering that Android malware does exist in significant quantities. It's less valuable if you've never rooted your phone and have never installed apps outside of the Play Store (or something else that uses its repository, like the Yalp Store), but still does offer some value beyond compliance reasons.

Anyone know what the state of AV on android is? $employer requires ESET on all windows machines, and I'm trying out the android app now. It doesn't seem to make my phone any slower...

veeti 9y ago

Utterly worthless, because apps on Android are sandboxed. Third-party AV can't do anything useful, and Play Services already provides built-in app scanning.

icebraining 9y ago
Devil's advocate: there are APK extractors (which work without root), so it's definitively possible for an AV to scan those files and report if there's something weird.
yellowapple 9y ago
An AV on a rooted phone would not have that restriction. Seeing as how rooting significantly increases the probability of malware infection on Android, such an AV would also be installable when it's needed the most.

avar 9y ago

I used to work for an AV vendor and we sold AV for the likes of Linux, Solaris, AIX etc. Now, that can be directly useful for e.g. mail or file servers on those platforms, but a lot of customers simply had to buy AV everywhere for compliance reasons. They'd be running the AV scan in cron checking for Windows viruses on AIX. Discussions with those people were funny. They knew what they were buying was worthless and made that clear, we knew our product was worthless to them and made that clear. But their boss's boss had obligated them to buy AV, so sure, if they wanted it anyway we were going to make it and take their money. I suspect Android AV exists for much the same reason.

yellowapple 9y ago
Android is a bit of a different situation: - Android "administrators" (read: end users) are generally less likely to be cognizant of potential viral vectors than a traditional Linux/AIX/Solaris/etc. administrator. - Android is capable of providing root access to applications should a user configure the device to do so, thus giving malicious software an avenue to break out of what's otherwise a pretty decent per-app sandbox. This is a concern due to the point above. - Variation between Android installations (as far as malware authors might be concerned) is far less than the variation in Linux/Unix installations (especially server installations), so there's a higher probability of one exploit or vector being applicable elsewhere. - Pirated software is more common on an Android device than on a Unix server. A good AV solution on Android is therefore valuable, especially considering that Android malware does exist in significant quantities. It's less valuable if you've never rooted your phone and have never installed apps outside of the Play Store (or something else that uses its repository, like the Yalp Store), but still does offer some value beyond compliance reasons.