BlackBerry sets initiatives in managing Android security

We all know that BlackBerry is already a secure system. No doubt that privacy and security are what made BlackBerry a reliable platform. However, the Canadian smartphone pioneer has been losing customers as Android and iOS continue to dominate the mobile industry and get ahead of the smartphone game. BlackBerry did allow Android apps to run on BB10 but consumers started to demand for a real Android-powered smartphone and so the PRIV is introduced.

BlackBerry and Android joining forces resulted to the introduction of the BlackBerry PRIV. It’s the first fully Android-powered BlackBerry that uses the latter’s privacy and mobile security model which we discussed in detail a few weeks ago. However, Google’s own mobile OS is not exactly the most secure so it needs the “power” of BlackBerry.

In a blog post, David Kleidermacher, Chief Security Officer at BlackBerry, noted how the privacy of mobile users goes beyond engineering to make sure the hardware, firmware, and software are well-protected.

Since Android is open source, it’s no secret that it is prone to attacks. To make sure the BlackBerry PRIV will remain secure, the security research team will regularly check the software and firmware content in each release. The goal is for BlackBerry to detect flaws and possible problems before they harm both the Android OS and the BlackBerry hardware.

BlackBerry is using an Android vulnerability patch program as an important response strategy. Such ensures that mobile security and privacy of BlackBerry PRIV owners are never compromised. BlackBerry has shared how they will manage the program. BlackBerry promised to release the following:

(1) Android Monthly Security Update Process. Since Google sends out a list of Android vulnerabilities to OEMs, BlackBerry will work on the fix and release monthly updates for PRIV owners who agreed to participate in the monthly update program. This way, the updates are delivered on time, to PRIV owners who purchased from shopblackberry.com and PRIV resellers (authorized dealers and mobile carriers).

(2) “Hotfix” Patching. There are Android vulnerabilities that need immediate fixing. BlackBerry will perform a “hotfix” and release ASAP. Such issues cannot wait for the scheduled monthly update so it is important that a fix is pushed to the customers. BlackBerry has the ability to patch PRIV unit directly as needed.

(3) Enterprise-managed Updates. BlackBerry enterprise will control PRIV phones through BlackBerry Enterprise Server (BES) and OTA management systems. Companies will benefit from this as they can control when security patches are delivered to make sure every device remains secure and private.

SOURCE: BlackBerry