Table Of Content-1 -
Practical Paranoia: Android 5 Security Essentials
Marc Mintz
Copyright © 2015, 2016 by Marc Louis Mintz.
Notice of Rights: All rights reserved. No part of this document may be reproduced or transmitted
in any form by any means without the prior written permission of the author. For information on
obtaining permission for reprints and excerpts, contact the author at [email protected], +1
888.479.0690.
Notice of Liability: The information in this document is presented on an As Is basis, without
warranty. While every precaution has been taken in the preparation of this document, the author
shall have no liability to any person or entity with respect to any loss or damage caused by or
alleged to be caused directly or indirectly by the instructions contained in this document, or by the
software and hardware products described within it. It is provided with the understanding that no
professional relationship exists and no professional security or Information Technology services
have been offered between the author or the publisher and the reader. If security or Information
Technology expert assistance is required, the services of a professional person should be sought.
Trademarks: Many of the designations used by manufacturers and sellers to distinguish their
products are claimed as trademarks. Where those designations appear in this book, and the author
was aware of a trademark claim, the designations appear as requested by the owner of the
trademark. All other product names and services identified in this document are used in editorial
fashion only and for the benefit of such companies with no intention of infringement of
trademark. No such use, or the use of the trade name, is intended to convey endorsement or other
affiliation within this document.
Editions: 1.0: 7/2015 • 1.01: 7/2015 • 1.02: 7/2015 • 2.0: 10/2015 • 2.1 11/2015 • 2.2: 1/2016
Cover design by Ed Brandt
ISBN-10: 1519333943
ISBN-13: 978-1519333940
- 2 -
Dedication
To Candace,
without whose support and encouragement
this work would not be possible
My great thanks to Anthony Galczak, our Android Guru,
who painstakingly assisted with the research for this project
- 3 -
Contents At A Glance
Dedication .......................................................................................................................... 3
Contents At A Glance ....................................................................................................... 5
Contents In Detail ............................................................................................................. 7
Introduction ..................................................................................................................... 15
1. Vulnerability: Passwords ............................................................................................ 25
2. Vulnerability: System Updates .................................................................................. 57
3. Vulnerability: App Updates ....................................................................................... 91
4. Vulnerability: Play Store ............................................................................................ 97
5. Vulnerability: Window Pinning (Whitelisting) .................................................... 107
6. Vulnerability: Screen Timeout ................................................................................ 117
7. Vulnerability: Device Hardware ............................................................................. 135
8. Vulnerability: SELinux & SEForAndroid .............................................................. 177
9. Vulnerability: Malware ............................................................................................. 207
10. Vulnerability: Data Loss ......................................................................................... 221
11. Vulnerability: When It Is Time To Say Goodbye ............................................... 249
12. Vulnerability: Network .......................................................................................... 259
13. Vulnerability: Google Account ............................................................................. 283
14. Vulnerability: Web Browsing ................................................................................ 309
15. Vulnerability: Email ................................................................................................ 351
16. Vulnerability: Instant Messaging .......................................................................... 421
17. Vulnerability: Voice and Video Communications ............................................. 439
18. Vulnerability: Documents ..................................................................................... 461
19. Vulnerability: Emergency Situation ..................................................................... 497
20. Vulnerability: Internet Activity ............................................................................. 509
21. Vulnerability: Google Wallet and Credit Cards ................................................. 533
The Final Word ............................................................................................................. 563
Mintz InfoTech, Inc. Android 5 Security Checklist ................................................ 565
Index ............................................................................................................................... 569
Your Virtual CIO & IT Department Mintz InfoTech, Inc.
when, where, and how you want IT ............................................................................ 573
Practical Paranoia Security Essentials Workshops & Books
Android, iOS, OS X, Windows .................................................................................... 575
- 5 -
Review Answers ............................................................................................................. 577
- 6 -
Contents In Detail
Dedication .......................................................................................................................... 3
Contents At A Glance ....................................................................................................... 5
Contents In Detail ............................................................................................................. 7
Introduction ..................................................................................................................... 15
Who Should Read This Book .................................................................................. 16
What is Unique About This Book .......................................................................... 17
Why Worry? .............................................................................................................. 19
Reality Check ............................................................................................................. 20
About the Author ..................................................................................................... 22
Practical Paranoia Updates ..................................................................................... 23
Practical Paranoia Book Upgrades ......................................................................... 24
1. Vulnerability: Passwords ............................................................................................ 25
The Great Awakening .............................................................................................. 26
Passwords ................................................................................................................... 27
Assignment: Create a Screen Lock using a Pattern Lock ............................. 29
Assignment: Create a Screen Lock Using a Password .................................. 34
LastPass ...................................................................................................................... 40
Assignment: Install LastPass ............................................................................ 40
Assignment: Add a Site to LastPass ................................................................. 47
Challenge Questions ................................................................................................. 54
Review Questions ..................................................................................................... 55
2. Vulnerability: System Updates .................................................................................. 57
System Updates ......................................................................................................... 58
Assignment: Check for and Install Android Updates ................................... 59
Assignment: Update Android System Software with Backups .................... 62
Assignment: Update Android System Software Using Smart Switch ......... 76
Assignment: Restore Data Using Smart Switch ............................................. 84
Review Questions ..................................................................................................... 89
3. Vulnerability: App Updates ....................................................................................... 91
App Updates .............................................................................................................. 92
Assignment: Update all Apps ........................................................................... 92
Review Questions ..................................................................................................... 96
- 7 -
Contents In Detail
4. Vulnerability: Play Store ............................................................................................ 97
App Purchases ........................................................................................................... 98
Assignment: Require Authentication for App Purchases ............................ 98
Unauthorized Apps ................................................................................................ 102
Assignment: Secure Play Store from Unauthorized Apps ......................... 102
Review Questions ................................................................................................... 105
5. Vulnerability: Window Pinning (Whitelisting) .................................................... 107
Window Pinning (Whitelisting) ........................................................................... 108
Assignment: Window Pinning (Whitelisting) ............................................. 108
Review Questions ................................................................................................... 116
6. Vulnerability: Screen Timeout ................................................................................ 117
Require Password After Screen Timeout ............................................................ 118
Screen Timeout ................................................................................................ 118
Assignment: Configure Screen Timeout ...................................................... 119
Lock Screen Notifications ...................................................................................... 122
Assignment: Restrict Lock Screen Notifications ......................................... 122
Do Not Disturb Mode ............................................................................................ 129
Assignment: Turn On Do Not Disturb Mode ............................................. 129
Review Questions ................................................................................................... 134
7. Vulnerability: Device Hardware ............................................................................. 135
SIM Card Lock ........................................................................................................ 136
Assignment: Set Up a SIM Card Lock ........................................................... 136
Device Encryption .................................................................................................. 143
Assignment: Encrypt Your Device ................................................................ 143
Smart Lock ............................................................................................................... 150
Assignment: Adding a Trusted Bluetooth Device ....................................... 151
Assignment: Adding a Trusted Place ............................................................ 158
Assignment: Add a Trusted Voice ................................................................. 164
Assignment: Use On-Body Detection ........................................................... 171
Review Questions ................................................................................................... 176
8. Vulnerability: SELinux & SEForAndroid .............................................................. 177
Warning Will Robinson ........................................................................................ 178
SELinux & SEForAndroid ..................................................................................... 179
KNOX Active Protection / KNOX ....................................................................... 181
Assignment: Activate Samsung KNOX Active Protection ......................... 182
My KNOX Workspace ........................................................................................... 187
- 8 -
Contents In Detail
Assignment: Installing My KNOX Workspace ............................................ 187
Assignment: Administer Your Own KNOX Workspace ........................... 195
Assignment: Using your KNOX Workspace ............................................... 198
Review Questions ................................................................................................... 205
9. Vulnerability: Malware ............................................................................................. 207
Anti-Malware .......................................................................................................... 208
Assignment: Install & Configure Bitdefender .............................................. 208
Assignment: Scan for Malware with Bitdefender ........................................ 214
Assignment: Restrict Access to Apps using Bitdefender’s App Lock ....... 216
Review Questions ................................................................................................... 220
10. Vulnerability: Data Loss ......................................................................................... 221
Sources of Data Loss ............................................................................................... 222
Assignment: Backup to Google ...................................................................... 223
Assignment: Verify the Google Backup via a Computer ............................ 228
Assignment: Data Recovery from Google .................................................... 230
Bitdefender Anti-Theft .......................................................................................... 234
Assignment: Activate and Configure Bitdefender Anti-Theft .................. 234
Assignment: Find a Device from a Computer ............................................. 238
Assignment: Activate Find My Mobile with a Samsung Account ............ 240
Assignment: Use Find My Mobile on a PC to Locate Your Device .......... 244
Review Questions ................................................................................................... 248
11. Vulnerability: When It Is Time To Say Goodbye ............................................... 249
Preparing a Device for Sale or Disposal .............................................................. 250
Assignment: Secure Erase an Android Device ............................................. 250
Assignment: Format the SD Card .................................................................. 253
Review Questions ................................................................................................... 257
12. Vulnerability: Network .......................................................................................... 259
Wi-Fi Encryption Protocols .................................................................................. 260
Assignment: Use Wi-Fi Analyzer to Determine Wi-Fi
Encryption Protocol ........................................................................................ 261
Routers: An Overview ............................................................................................ 262
Firewall ..................................................................................................................... 264
NoRoot Firewall ...................................................................................................... 265
Assignment: Install and Configure NoRoot Firewall for Android ........... 265
Assignment: Allow an App Access with NoRoot Firewall ......................... 270
Assignment: Use Global Filters and Access Log with NoRoot Firewall ... 274
- 9 -
Contents In Detail
Review Questions ................................................................................................... 281
13. Vulnerability: Google Account ............................................................................. 283
Google Account ...................................................................................................... 284
Assignment: Create a Google Account ......................................................... 285
Assignment: Implement Two-Step Verification for Your
Google Account ................................................................................................ 293
Review Questions ................................................................................................... 308
14. Vulnerability: Web Browsing ................................................................................ 309
HTTPS ...................................................................................................................... 310
Assignment: Install HTTPS Everywhere ...................................................... 312
Browser Security Settings ...................................................................................... 314
Assignment: Configure Google Chrome Settings ....................................... 314
Assignment: Google Incognito Mode ........................................................... 323
Safer Internet Searches with DuckDuckGo ........................................................ 325
Assignment: Install DuckDuckGo Search & Stories ................................... 325
Assignment: Use DuckDuckGo to Search and Display in an
External Browser .............................................................................................. 327
TOR .......................................................................................................................... 333
Assignment: Install Firefox ............................................................................. 335
Assignment: Install and Configure Orbot .................................................... 337
Review Questions ................................................................................................... 349
15. Vulnerability: Email ................................................................................................ 351
The Killer App ......................................................................................................... 352
Phishing ................................................................................................................... 353
Email Encryption Protocols .................................................................................. 354
TLS and SSL ............................................................................................................. 355
Assignment: Configure Email to Use TLS or SSL ....................................... 355
Web Mail ................................................................................................................. 365
Assignment: Configure Browser Email to Use HTTPS .............................. 365
End-To-End Secure Email With SendInc ........................................................... 367
Assignment: Create a SendInc Account ....................................................... 368
Assignment: Create an Encrypted SendInc Email ....................................... 370
Assignment: Receive and Respond to a SendInc Secure Email ................. 372
End-To-End Secure Email With S/MIME .......................................................... 374
Assignment: (Windows) Acquire a Free Class 1 S/MIME
Certificate for Personal Use ............................................................................ 375
- 10 -
Description:Это простое, пошаговое, полное руководство по безопасности вашего Android телефона и планшета. Оно полностью пересмотрено и обновлено для Android 5 (Lollipop).Вредоносные атак
