Saturday 11 May 2013

Lookout to blacklist data-snooping Android ad networks and apps

Harmful ad networks collecting more information on their users than required have been given 45 days to fix their services, or they will be blacklisted as adware by mobile security firm Lookout.
Lookout security expert Jeremy Linden said the blockade is essential to combat the growing number of – officially legitimate – mobile advertising networks running on mobile marketplaces and apps that are collecting information without good reason.
"Over the past year we've seen a marked increase in ‘adware', software that contains ad networks that compromise a user's privacy or interfere with his experience. While the majority of mobile ads are legitimate, there are a few bad ad networks that put users at risk," wrote Linden.
"Ad networks and advertisers are both the gatekeepers for vast amounts of personal data and an important part of the overall mobile ecosystem; it's important that they get user privacy right."
The devious ad networks have been able to continue operating due to a lack of clarification within the security community about what adware is.
"Currently, there is inconsistency in the way adware is classified by the mobile industry. This lack of clarity gets in the way of tackling the problem," wrote Linden.
"Today, we are announcing rules and standards for acceptable advertising practices that promote good user experience and privacy best practices. We will give the industry – ad networks, advertisers, app developers – a set amount of time to change their practices; if the advertising does not abide by these rules it will be classified as adware."
The definition will list any ad network that displays advertising outside of the normal in-app experience, harvests unusual personally identifiable information or performs unexpected actions as a response to ad clicks, without gaining the users' permission to do so, as adware.
Unmoderated advertising networks are a growing problem on mobile ecosystems. Android is by far the worst hit due to Google's ongoing policy of not pre-vetting applications and services loaded onto the operating system. Most recently Lookout discovered the BadNews malware targeting the Android ecosystem, which avoided detection by embedding itself in advertising networks hosted in legitimate applications.

No comments:

Post a Comment