8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
1/49
...
Market Overview of Mobile OperatingSystems and Security Aspects
Lecture 11
Mobile Business I (WS 2013/14)
Prof. Dr. Kai RannenbergDeutsche Telekom Chair of Mobile Business & Multilateral SecurityJohann Wolfgang Goethe University Frankfurt a. M.
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
2/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OS
Apple iOS (Unix-based)Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS2
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
3/49
...
Worldwide Smartphone Sales to EndUsers by Operating System (2009-2013)
7%5%
3%2% 2% 3%
3% 3%
9%
17%
33%
43%
51%
64%
70%
79%
16% 17% 16% 18%
24%
19%21%
14%
20%19%
14%12%
9%
5%
44%
41%
31%
22%
12%
1% 0%
Q4 2009 Q2 2010 Q4 2010 Q2 2011 Q4 2011 Q2 2012 Q4 2012 Q2 2013
Others Windows Android iOS BlackBerry OS Symbian Bada
3
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
4/49
...
Android 64,2%
iOS 18,8%
Windows 2,6%
BlackBerry OS 5,2%
Bada 2,7%
Symbian 5,9%
Others 0,6%
Android iOS Windows BlackBerry OS Bada Symbian Others
Worldwide Smartphone Sales to EndUsers by Operating System (Q2 2012)
4
[Gartner2013]
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
5/49
...
Android 79,0%
iOS 14,2%
Windows 3,3%
BlackBerry OS 2,7%
Bada 0,4%
Symbian 0,3%Others 0
,2%
Android iOS Windows BlackBerry OS Bada Symbian Others
Worldwide Smartphone Sales to EndUsers by Operating System (Q2 2013)
5
[Gartner2013]
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
6/49
...
Android 51,9%
iOS 34,3%
BlackBerry OS 8,0%
Others 5,9%
Android iOS BlackBerry OS Others
US installed smart phone baseby Operating System (July 2012)
6
[Nielsen2012]
During July 2012,51,9% ofsmartphone ownersin the US had adevice that runs onthe Android
operating system.
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
7/49
...
Android 52,0%
iOS 40,0%
BlackBerry OS 3,0%
Windows 2,0%
Others 2,0%
Android iOS BlackBerry OS Windows Others
US installed smart phone baseby Operating System (Q2 2013)
7
[Nielsen2013]
During Q2 2013an average of 52%of smartphoneowners in the UShad a handsetthat runs on the
Android operatingsystem.
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
8/49
...
Worldwide Smartphone Sales to End Usersby Operating SystemQ2-2013 vs. Q2-2012
Operating System 2Q13 Units
2Q13 MarketShare (%)
2Q12 Units
2Q12 MarketShare (%)
Android 177,898.2 79.0 98,664.0 64.2
iOS 31,899.7 14.2 28,935.0 18.8Microsoft 7,407.6 3.3 4,039.1 2.6BlackBerry 6,180.0 2.7 7,991.2 5.2Bada 838.2 0.4 4,208.8 2.7Symbian 630.8 0.3 9,071.5 5.9
Others 471.7 0.2 863.3 0.6TOTAL 225,326.2 100.0 153,772.9 100.0
8
In 1.000 Units
[Gartner2013]
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
9/49
...
Worldwide Smartphone Sales to End Usersby Vendor
Q2-2013 vs. Q2-2012
Company 2Q13 Units
2Q13 MarketShare (%)
2Q12 Units
2Q12 MarketShare (%)
Samsung 71,380.9 31.7 45,603.8 29.7
Apple 31,899.7 14.2 28,935.0 18.8
LG Electronics 11,473.0 5.1 5,827.8 3.8
Lenovo 10,671.4 4.7 4,370.9 2.8
ZTE 9,687.6 4.3 6,331.4 4.1
Others 90,213.6 40.0 62,704.0 40.8TOTAL 225,326.2 100.0 153,772.9 100.0
9[Gartner2013]
In 1.000 Units
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
10/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
11/49
...
Mobile Devices vs.Stationary Devices
Due to the limitations of the mobile devices,mobile operating systems also have to cope with
the following challenges:Limited device capabilities and resources (storage,memory, processing time, etc.)
Usability issues
Security and system integrity issues
11
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
12/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
12
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OS
Apple iOS (Unix-based)Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
13/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
14/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
15/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
15
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
16/49
...
Palm OSDevices
16
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
17/49
...
Palm OSOverview
The operating system is made by palmsource Several device manufacturers:
Palm (e.g. Treo series)HandspringGarmin (navigation devices)FossilSamsungSony
Current version 6.1 (Cobalt)There are no devices using version 6.1 on the market. Most of the devices areequipped with Palm OS 5.4 (Garnet), such as the Tungsten series.
17
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
18/49
...
Palm OSFeatures
Communication:IrDABluetoothWiFi (IEEE 802.11)
GSM/GPRSCDMASupport of the TCP/IP network protocolIntegrated personal information management (PIM)Support for several encryption and security algorithms(e.g. RSA, SHA1, RC4)Large choice of 3rd party software availableLong battery life
18
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
19/49
...
Palm OSHistory
1996: Palm Pilot 1000, first device using Palm OS1998: Palm III using Palm OS v32000: Palm IIIc, first device using Palm OS and a colour display
2003: Palm OS 52004: Palm OS 6.1 (Cobalt) and Palm OS 5.4 (Garnet)2006: Palm s Treo Smartphones with Windows MobileName change to Garnet OS future versions to be based on theAccess Linux platform
2010: Hewlett-Packard acquired Palm for $1,2 billion, namechange to HPwebOS2011: HP announced to stop the production of all HPwebOSdevices, including smart phones and tablets
19
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
20/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
20
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
21/49
...
Apple iOS
Developed by Apple for iPhone, iPodTouch, iPad and Apple TVLatest release: iOS 7iOS derived from Mac OS X,a Unix-based operating systemApple does not permit the OS to runon third-party hardwareUser-interface uses multi-touchgestures
21
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
22/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
22
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
23/49
...
Linux: LiMo (Linux Mobile), Openmoko Linux, Qt Extended (Qtopia)Symbian platform
Latest release: Nokia Belle Feature Pack 2 for Symbian^3 devices
Android (by Open Handset Alliance)Latest release: 4.4 (KitKat)
Windows MobileLatest release: Windows Mobile 6.5.5Windows Phone
Latest release: Windows Phone 8.0 Update 3 (General Distribution Release GDR3)
Maemo (by Nokia) MeeGo (by Nokia, Intel) Sailfish OS (by Jolla)Latest release: Sailfish OS 1.0
Tizen (by Samsung, Intel, Linux Foundation)Latest release: 1.0 (Codename Larkspur)
Firefox OS (by non-profit organisation Mozilla)Latest release: 1.1.0
China-Focused Mobile OSCurrently under development by Taiwan-based HTC
Manufacturer-independentmobile OS
= Linux-based23
[WSJ2013]
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
24/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
24
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
25/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
26/49
...
SymbianConsortium/Licensees
[Symbian2006]In 2006, Symbian was owned by 26
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
27/49
...
Symbian History1998-2008
Symbian was founded as a privately owned company in June 1998.Owner: Ericsson, Nokia, Panasonic, Psion, Samsung Electronics,Siemens and Sony Ericsson
Open Symbian OS telephones were available since 2001
Open : It is possible to install 3 rd-party applications.
Beginning of 2001: Nokia 9210 Communicator
2004: Symbian OS 8.0
2005: Symbian OS 9.1 (S60 3rd edition)
2006: Symbian OS 9.3 released, extending the OS with WiFi andHSDPA
2007: Symbian OS 9.4 (S60 5th edition) = Symbian^1 (SymbianOne )
2008 June: Symbian Foundation announced
2008 December: Nokia buys Symbian Ltd. and becomes the majorcontributor to code of Symbian platform
27
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
28/49
...
Symbian History2009-2014
2009: Symbian Foundation foundedSymbian platform successor to Symbian OS and Nokia Series 60 .
2010: Symbian OS 9.5 (Symbian^3). Nokia N8 first smartphone to run Symbian^3.
2010 November: Due to a lack of support from funding members, SymbianFoundation transition into a licensing-only organisation
2011: Symbian Anna and Symbian Belle as an update to Symbian^3
2011 February: Nokia collaborates with Microsoft and adopts Windows Phone 7 fortheir smartphones. Relevance of Symbian platform, especially in the mobile appmarket, drops significantly . Market share in sharp decline, notably in the high pricedsmartphone segment
2012: Symbian Belle renamed to Nokia Belle2013: Nokia Belle Feature Pack 2 (latest version)
2014 January: No new applications can bepublished in the Nokia Store
28
[Nokia2013]
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
29/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
29
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
30/49
...
Embedded LinuxDevices
30
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
31/49
...
Embedded LinuxOverview
Linux is an Open Source operating system.Only a limited amount of device manufacturerswere offering devices with a pre-installed Linuxsolution (e.g. Motorola, NEC, Panasonic).However, there are several Linux distributions,such as CLinux, that can be installed onexisting devices (e.g. iPAQ).
Motorola, as one of the major mobile phonemanufacturers, was using Linux as (one) of theirOS platforms.
31
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
32/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
32
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
33/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
34/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
34
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
Windows CE Pocket PC
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
35/49
...
Windows CE, Pocket PC,Pocket PC Phone Edition, Mobile
Devices
35
Windows CE Pocket PC
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
36/49
...
Windows CE, Pocket PC,Pocket PC Phone Edition, Mobile
History
[Hpcfactor2010]
36
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
37/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
38/49
...
Microsoft Windows Phone 7
Launched in October and November2010
Successor to Windows Mobileplatform, but technically a newand different platform withoutbackward compatibility
Aimed at consumer market insteadof enterprise market unlike WindowsMobileNew user interface
38
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
39/49
...
Microsoft Windows Phone 8
Windows Phone 8 launched inOctober 2012 together withWindows 8 with similar optics
Successor to Windows Phone 7
Latest release: Windows Phone 8
Update 3 (General DistributionRelease GDR3) in October 2013
39
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
40/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
40
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
41/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
42/49
...
Overview - Market Overview of Mobile OperatingSystems and Security Aspects
42
The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers
OverviewPalm OSApple iOS (Unix-based)
Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux
Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS
Security features of selected mobile OS
h f
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
43/49
...
Current Threats fromMalware on Mobile OS
Many mobile operating systems allow theexecution of 3 rd-party software:Malware can be executed on mobile operatingsystems, either intentionally or by security leaksinside the mobile operating system (exploits).
Possible threats for the user are:Device malfunctionLoss of data (malware erasing data)Loss of money (e.g. malware sending SMS topremium services )Shorter battery runtime (more processing/resourceusage)
43
Ti li
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
44/49
...
TimelinePDA/Mobile Threats
Beginnings of Mobile Malware09/2000 : Liberty Horse Trojan12/2000 : Telefonica SMS Mailer08/2001 : Flooder sends unwanted SMS
09/2001 : Phage erases data on Palm devices02/2003 : Nokia V-Card exploit09/2004 : First Symbian OS malware
Strong growth of Mobile MalwareThe number of malware programs masquerading as legitimatemobile apps grew by more than 600 percent in 2012Most popular target: Android
44
[ATD2013]
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
45/49
...
Security Precautions and Countermeasures
Memory protectionProcesses are not able to access the memory of other processes.
File protectionEncryptionAccess control
Access controlsDefinition of access rights and monitoring of their enforcement.
Support for security modulesSecure I/OCode integrity management: Integrity of programs is checked beforethe are started by e.g.
Checking certificatesProof Carrying CodeAdditional Security Software may be needed, e.g.
Virus scannersFirewalls
45
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
46/49
...
Access Control
Every user has certain assigned access rights,e.g.
Reading a fileWriting a fileAccessing a peripheral device
The OS controls that users or the processes
started by a user, can only execute thoseactions, which they are allowed to.
46
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
47/49
...
Access Matrix
F1 F2 F3 Device
sPeriphery
U1 Read Read
U2 Print
U3 Read Execute
U4 ReadWrite
ReadWrite
UserObject
47
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
48/49
8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109
49/49
...
Bibliography
[ATD2013] Juniper Study Finds Mobile Malware Grew 600 Percent, Targets Android Most,
http://allthingsd.com/20130626/juniper-study-finds-mobile-malware-grew-600-percent-targets-android-most/, accessed 2013-11-26.[Canalys07] http://www.canalys.com/pr/2007/r2007024.htm, accessed 2011-09-23[Gartner2013] Gartner Group (2013),Gartner Says Smartphone Sales Grew 46.5 Percent in Second Quarter of 2013 and ExceededFeature Phone Sales for First Time, http://www.gartner.com/newsroom/id/2573415, accessed2013-11-20[Nielsen 2012] Young Adults and Teens Lead Groth Among Smartphone Owners,http://www.nielsen.com/us/en/newswire/2012/young-adults-and-teens-lead-growth-among-smartphone-owners.html, accessed 2013-11-22.[Nielsen 2013] Whos Winning the U.S. Smartphone Market?,http://www.nielsen.com/us/en/newswire/2013/whos-winning-the-u-s-smartphone-market-.html, accessed 2013-11-22[Nokia2013] Nokia Developer News: Changes to supported content types in the Nokia Store,http://developer.nokia.com/Blogs/News/blog/2013/10/04/changes-to-supported-content-types-in-the-nokia-store/, accessed 2013-11-26.
[Gartner2013] http://www.gartner.com/newsroom/id/2573415, accessed 2013-11-22.[Hpcfactor2010] www.hpcfactor.com/support/windowsce, accessed 2011-09-23http://commons.wikimedia.org/wiki/File:Windows_CE_Timeline.png, accessed 2011-09-23.[Symbian2006] symbianblogs.com/history.html, accessed 2011-09-20[WSJ2013] HTC Develops China-Focused Mobile Operating System (28 August 2013),http://online.wsj.com/news/articles/SB10001424127887324463604579040172467657350,accessed 2013-11-26.