Android application development: a brief analysis of Android architecture, evaluation of security loopholes and development of preventive mechanisms

Nowadays, mobile phones are used as multipurpose devices that fit in the palm of the hand having the capability to take photos or sending emails. However, with the advent of mobile technologies, attackers are developing new techniques to bypass security mechanisms and breach into the security systems of mobile phones. In this report, a brief introduction to mobile viruses along with security principles to sustain the confidentiality, availability, and integrity of the data has been discussed. Previous research that proposed novel techniques of mobile security have been discussed. Moreover, layered and cross-platform approaches are discussed to understand Android architecture. Current statistics of attacks on mobile devices and points of future concern have been analyzed. A detailed analysis of malware and currently existing security loopholes in the Android operating system is presented. Nowadays, malicious applications can be developed by any moderate programmer. In this work, as a proof of concept, a malicious application is developed that can retrieve confidential data of users without their consent. Additionally, a preventive mechanism to encrypt credentials authorized by users has also been developed to prevent a data breach and provide users the flexibility to control their data settings and privacy