Enabling Google Play Protect
Google Play Protect should be enabled on all Android devices. With Google Play Protect enabled, apps downloaded from the Google Play store are scanned automatically. Known malicious software is searched for and dangerous websites are blocked. Google Play Protect also allows devices to be locked, located and/or wiped remotely. Some later models have Google Play Protect enabled by default. In other instances, it must be manually enabled.
Why is it important?
Google Play Protect offers a first line of defence when downloading apps from the Google Play Store.
The ability to remote wipe lost devices is also valuable. This ensures data cannot be accessed by opportunists in cases of loss or theft.
Priority Tier
Behaviours in SebDB are ranked by their impact on risk. Tier 1 behaviours have the biggest impact, Tier 4 behaviours the least.
Risk Mitigated
Malware Infection
Malware infections occur when malicious software makes its way on to a device or network.
Data Theft
Data theft is the intentional stealing of data.
Further reading
https://android-developers.googleblog.com/2020/02/how-we-fought-bad-apps-and-malicious.html https://www.ncsc.gov.uk/collection/end-user-device-security/platform-specific-guidance/android-8 https://s3.amazonaws.com/academia.edu.documents/62002199/Proceedings_Digital_Privacy_and_Security_Conference_202020200205-127731-1fr50ut.pdf?response-content-disposition=inline%3B%20filename%3DProceedings_of_the_Digital_Privacy_and_S.pdf&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWOWYYGZ2Y53UL3A%2F20200214%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200214T155040Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=109cb9d30d29e83f1965fbb8cba923fbf63b8021b3458494880085e7826b621d#page=118 https://pdfs.semanticscholar.org/05b3/0a914b1ba0520bf7f78b80ea0d9f37652bf3.pdf