Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Which is more secure, Android or iOS? The answer isn't that simple

Aaron Cockerill, VP of products, Lookout | April 14, 2015
Beyond either OS you need an actionable, multi-layer approach to security.

This vendor-written tech primer has been edited to eliminate product promotion, but readers should note it will likely favor the submitter's approach.

We love to ask the question, "Which is more secure: iOS or Android?" But if you really want to drive secure mobile productivity you're going to have to start looking at the bigger picture.

The longstanding Android vs. iOS debate is understandable because these mobile OSes power the majority of devices employees bring to work today. But two trends in the mobile world are uprooting the traditional arguing points -- and changing the mobile security landscape overall. They highlight our need for an actionable, multi-layer security approach, not just putting your hope in the OSes of two major mobile players.

Trend one is the advent of beautiful devices that don't utilize Google Mobile Services, or GMS. The Android community embraces experimentation. Indeed, we're seeing much of this innovation extend beyond the Google-controlled version of Android and move into the Android Open Source Platform. At this year's Mobile World Congress, there were many devices that could truly rival the greats like Samsung, LG, HTC, and yes, even Apple. They're slick, beautiful, and have intuitive user experiences. Best part? They don't cost a lot.

But there's a problem here. The mobile industry has by-and-large relied on the safety and reliability of GMS, especially as it comes to app vetting through the Google Play Store. Devices that don't use GMS are not beholden to Google's best practices, and in turn can't benefit from them when it comes to securing the devices and the apps on them. In fact, many of these manufacturers include their own or other third parties' app stores on their devices. The more these economically priced, yet still competitive, devices flow into the market, the more we will see them -- and unvetted apps -- flow into the enterprise via BYOD.

And trend two is enterprises building home grown applications that specifically address their productivity needs. Indeed, "48% of businesses expect to increase their mobile app budgets, with 20% expecting to increase app budgets by more than 10 percent," according to a recent report by CDW.

While Android has always made the distribution of custom enterprise apps easy, Apple, on the other hand, has traditionally run a very tight ship. Users can download from the official Google Play app store, but they can also visit third-party marketplaces, download apps as attachments in email, and more. Apple, instead, usually funnels app downloading through its protected App Store.

But in an effort to court enterprises, Apple introduced a mechanism to distribute these homegrown apps to the thousands of employees an enterprise has through something called an enterprise provisioning profile. In simple terms, this profile allows an enterprise to push out their application to any user without needing to go through Apple's sometimes rigorous process of getting an app accepted to the App Store.


1  2  Next Page 

Sign up for Computerworld eNewsletters.