‘white hat hackers’ are google android’s new secret security weapon

Google is using white hat hackers to find hidden vulnerabilities in its Android operating system. Source Pixabay GOOGLE is taking an innovative method to weeding out security vulnerabilities in its Android operating system ecosystem they’re employing “white hat hackers” who can earn bounties by sussing out hidden bugs in the system. Under a program called the Google Play Security Reward Program, the owner of the biggest operating system in the world will collaborate with big bounty platform HackerOne to engage amateur and professional hackers to gamify security testing. Through the program, hackers will be paid US$1,000 per vulnerability found. Tech Wire Asia 27 September, 2017 The use of white hat hackers by technology companies and developers is an triedandtested security strategy that remains popular even today. White hat hackers are a form of security specialist whose job it is to break into protected systems in order to assess the strength of security networks. Though many app companies employ hackers through their own bounty programs, Google’s marks the first time an operating system has offered rewards on behalf of their developers. Through the program, hackers who discover a security vulnerability in a participating app can report it to developer. The hacker will be included in the efforts to fix such security holes, and success will result in a US$1,000 pay out from the Android Security team. Developer teams may decide to sweeten the deal with their own rewards. Android is the most used operating system in the world, but the openness of its API has made it vulnerable. Source Pixabay Currently, 13 of the Google Play Store’s most popular apps are participating in the program, and will allow their systems to be continuously breached by hackers. These include Tinder, Headspace, Dropbox and Snapchat. There are plan to open the program to the wider Android community after a short trial period with the current group. For developers, it’s as huge win as it represents a real effort by Google’s Android branch to address the security issues inherent in the platform’s makeup. Android is notorious for having a porous security network, largely due to device fragmentation and to the openness of the platform. Android was designed to allow developers into its corners, but this has resulted in a tradeoff for secure protections. Tech Wire Asia 16 October, 2017 The program could help developers – many in small startups with shoestring budgets – to cut costs by taking…

source

Comments

comments