RiskRanker targets third-party Android app market security

RiskRanker targets third-party Android app market security

NQ Mobile is taking the fight against Android malware to online markets where malicious apps are often disguised as legitimate products or secretly inserted in games.

Rather than attack the problem using traditional antivirus techniques, NQ has introduced a technology that Android app markets could use to continuously scan for malware.

The new product, RiskRanker is similar to Google Bouncer, an automated system that looks for known spyware and Trojan horses and also searches for behavior that would indicate malware.

RiskRanker does the same, but is adaptable for use in any Android market. Bouncer works only with the Google Play Store.

The NQ Mobile product analyzes the code within apps to look for instructions that would indicate malicious intent, such as searching for and exploiting vulnerabilities within Android to gain root access in the smartphone.

"To the best of my knowledge, RiskRanker is one of the first in this space to identify new threats without using malware samples," Xuxian Jiang, a consultant for NQ Mobile who helped to lead the development team, said. Jiang is a full-time associate professor at North Carolina State University.

Hackers have exploited the limitations of traditional antivirus technology for years. The software uses signatures taken from samples in known malware in order to identify malicious apps. To get around this strategy, cybercriminals constantly rewrite malware, so that antivirus products can't recognize it.

NQ Mobile claims that in recent trials, RiskRanker scanned more than 100,000 apps from a variety of marketplaces and identified 718 instances of malware, including 322 that were previously unknown.

The new product will be sold to Android markets. In addition, NQ Mobile plans to partner with mobile application management vendors to include RiskRanker as a feature in their software consoles, Kim Titus, senior director of communications, said.

3LM, a wholly owned subsidiary of Motorola Mobility, plans to integrate RiskRanker in its products to provide scanning and blacklisting for its business customers.

NQ Mobile provides a free version of antivirus software for Android smartphones, as well as a premium version. The company also sells cloud-based malware detection called Enterprise Shield, which was introduced in June.

Pricing and general availability of RiskRanker were not disclosed. "NQ Mobile is currently exploring global opportunities," a spokesman said.

Read more about wireless/mobile security in CSOonline's Wireless/Mobile Security section.

Follow Us

Join the newsletter!

Error: Please check your email address.



A snapshot of the Kiwi partners set to shine at the Reseller News Awards

A snapshot of the Kiwi partners set to shine at the Reseller News Awards

With the 2017 Reseller News ICT Industry Awards only weeks away, Reseller News profiles the power line-up of partners set to dominate the biggest night on the channel calendar. ​Ranging from the enterprise, down through the mid-market and small business sectors into the heart of the start-up scene, the end result is the most diverse and wide-ranging partner line-up in the history of the Awards, playing host to the leading innovators of the past 12 months.​

A snapshot of the Kiwi partners set to shine at the Reseller News Awards
Show Comments