手機安全軟體可能會誤判軟體有漏洞

標籤：

有些Mobile Security軟體運行很快,不代表品質很高, 例如這個文章以appBug為例,分析誤判的情況,

http://www.techrepublic.com/article/what-appbugs-is-really-saying-about-android-app-security/

副標題為: A new "security app" for Android claims apps like the ASTRO File Manager are vulnerable. Jack Wallen challenges this claim.

Jack Wallen認為該軟體只是根據資料庫記錄的軟體名來判斷手機軟體是否有漏洞, 而不是根據軟體版本,作業系統版本等來綜合判斷. 或許軟體升級後修複了一些漏洞, 或許手機使用了lollipop這種最新版系統, 可以免疫很多漏洞.

他的猜測是: The AppBug scanning is so remarkably fast that it seems the app is merely checking to see if you have apps installed based on a particular database of known vulnerable apps instead of checking the installed apps against the installed system for actual vulnerabilities.

手機安全軟體可能會誤判軟體有漏洞