Honey, I Shrunk the Attack Surface - Adventures in Android Security Hardening

Explore Android's attack surface reduction history and its role in the broader Android security landscape in this 51-minute Black Hat conference talk. Delve into the technical strategies employed for attack surface reduction, examining specific bugs rendered unreachable through hardening efforts over recent years. Gain insights into the overall impact of these security measures and identify areas for further improvement. Learn about layers of defense, key principles, and the evolution of Android security from Windows Vista to modern implementations. Discover how Project Trouble, Media Server Hardening, and other changes have contributed to enhanced security. Analyze the effects on vulnerability research, mitigation techniques, and the security community's recognition of these efforts. Conclude with a look at future directions, including better separation of vendor code, to further strengthen Android's security posture.