have admin rights Custom ROMs iOS is closed source Android allows and there are no custom ROMs and custom ROMs makes it possible available. The because the system bootloader cannot be is open source and unlocked since it the bootloader can relies on the be unlocked signature of the firmware using Apple’s private key. Default Apple controls all Each OEM Due to the higher system apps default installed manufacturer and number of possible system apps, which region may add to customizations in are the same for all their devices their Android there is a different types of own custom system bigger attack surface devices. and pre-installed or opportunity for apps. vulnerabilities to be exploited. Memory and Available by default Flash storage Android is far more file system with different classes encryption is vulnerable to attacks encryption of encryption to supported but using forensic tools protect against direct depends on the to read data even in flash storage access device manufacturer. devices with using forensic tools. In most cases the encryption enabled. Relies always on storage of encryption iOS implements a tamper-proof keys is not tamper level of security that hardware support for proof and secured by even Apple in some storage of encryption hardware. cases is not able to keys and execution circumvent. of encryption functions. OS features Stripped down from Most standard In Android an app basic commands, utilities are available can run a “ps” utilities, and shell. and some are not command to get the protected by list of running permissions. processes and infer the installed app by the users without requiring any specific permission.
have admin rights Custom ROMs iOS is closed source and there are no custom ROMs available. The bootloader cannot be unlocked since it relies on the signature of the firmware using Apple’s private key. Android allows custom ROMs and makes it possible because the system is open source and the bootloader can be unlocked Default system apps Apple controls all default installed system apps, which are the same for all different types of devices. Each OEM manufacturer and region may add to their devices their own custom system and pre-installed apps. Due to the higher number of possible customizations in Android there is a bigger attack surface or opportunity for vulnerabilities to be exploited. Memory and file system encryption Available by default with different classes of encryption to protect against direct flash storage access using forensic tools. Relies always on tamper-proof hardware support for storage of encryption keys and execution of encryption functions. Flash storage encryption is supported but depends on the device manufacturer. In most cases the storage of encryption keys is not tamper proof and secured by hardware. Android is far more vulnerable to attacks using forensic tools to read data even in devices with encryption enabled. iOS implements a level of security that even Apple in some cases is not able to circumvent. OS features Stripped down from basic commands, utilities, and shell. Most standard utilities are available and some are not protected by permissions. In Android an app can run a “ps” command to get the list of running processes and infer the installed app by the users without requiring any specific permission.
2517321_EN_impact_assessment_part2_v5.docx