Over the years Android has accumulated a large number of security enhancements. In its early days, Android relied mainly on the Linux kernel's filesystem and process isolation to implement its own permission model. Since then, Android added support for SELinux, SEAndroid, TrustZone, Verified Boot, Full-Disk Encryption, File-Based Encryption, Multi-Users and many other features.
This talk will explore Android's security model in great detail and explain how the functionality found in the hardware and the kernel is used to implement Android's security features. As we'll see, there are quite a few moving parts in Android's security model.
Because Karim lives in Canada, we will meet him in a live Google Hangouts session.
Karim's video is available on
YouTube, he also shared his
slides with clickable links. Use left/right or pgup/pgdown to navigate through the slides.