First, a little information on the program. When an app is submitted to the Play Store, it gets scanned to detect a variety of vulnerabilities. If something is found, the app gets flagged and the developer is notified (above). Diagnosis is provided to help get the app back in good standing. Google doesn’t distribute those apps to Android users until the issues are resolved.
Google likens the process to a doctor performing a routine physical.
Google recently offered an update on its Application Security Improvement Program. First launched five years ago, the program has now helped more than 300,000 developers fix more than 1 million apps on Google Play. In 2018 alone, it resulted in over 30,000 developers fixing over 75,000 apps.
In the same year, Google says it deployed the following six additional security vulnerability classes:
▬ SQL Injection
▬ File-based Cross-Site Scripting
▬ Cross-App Scripting
▬ Leaked Third-Party Credentials
▬ Scheme Hijacking
▬ JavaScript Interface Injection
The list is always growing as Google continues to monitor and improve the capabilities of the program.
Google originally created the Application Security Improvement Program to harden Android apps. The goal was simple: help Android developers build apps without known vulnerabilities, thus improving the overall ecosystem.
Google understands that developers can make mistakes sometimes and they hope to help catch those issues for years to come. Security will continue to be a big talking point as technology evolves. It’s important for users to be able to trust the apps on their phones.
