There have long been issues with the Android security model, but researchers called runtime-information-gathering (RIG) attacks an emerging security threat to Android and Android-based Internet of Things (IoT) systems. RIG attacks exploit apps to obtain sensitive user data “ranging from phone conversations to health information;” Android-controlled IoT devices such as Belkin NetCam Wi-Fi Camera with Night Vision and Nest Protect are equally vulnerable to RIG attacks. To mitigate the RIG threat, researchers developed an app that pauses potentially dangerous processes and then “resumes them after the security-critical operation is done and the environment is cleaned.”

To read this article in full or to leave a comment, please click here

…