Pages

Report: Android malware and spyware apps spike in the Google Play Store

Thursday 20 February 2014

Where's My Droid and Speed Night are cited as the most downloaded malicious apps; compromised ad networks are the biggest risk


The number of mobile apps infected with malware or that are conduits for spyware in Google's Play Store nearly quadrupled between 2011 and 2013, a security vendor has reported.
In 2011, there were about 11,000 apps in Google's mobile marketplace that contained malicious software capable of stealing people's data and committing fraud, according to the results of a study published Wednesday by RiskIQ, an online security services company. By 2013, more than 42,000 apps in Google's store contained spyware and information-stealing Trojan programs, the company said. (RiskIQ did not analyze apps in Apple's App Store.)
[ Understand how to both manage and benefit from the consumerization of IT with InfoWorld's"Consumerization Digital Spotlight" PDF special report. | Subscribe to InfoWorld'sConsumerization of IT newsletter today. ]
RiskIQ CEO Elias Manousos told InfoWorld that its definition of spyware includes apps that connect to advertising networks, a group that comprises about half the reported "malicious" apps. Many apps use ad networks legitimately, but some ad networks are used essentially as money-laundering mechanisms for data obtained through deceptive practices within apps, as well as through spyware apps. Developers may not be aware that their apps use such "gray market" ad networks or have components obtained from other developers that are actually spyware. Legitimate ad networks can also be conduits for such "gray market" apps. Manousos said its count of suspect apps that used ad networks included only apps that antivirus vendors or other investigations separately identified as problematic, so the count does not include all apps that use ad networks.
Although RiskIQ's analysis only covers Android apps, iOS and other platforms' apps are equally vulnerable to this sort of ad network abuse because in many cases it is the network or a back-end service that is compromised.
Apps designed to personalize people's Android smartphones were most susceptible, as well as entertainment and gaming apps. Some of the most malicious apps in the Google Play store downloaded since 2011 were Wallpaper Dragon Ball, a wallpaper app, and the games Finger Hockey and Subway Surfers Free Tips.
Both Wallpaper Dragon Ball and Finger Hockey, RiskIQ said, have malware that steals confidential information such as device IDs from infected devices. Subway Surfers Free Tips, meanwhile, uses a Trojan called Air Push to bypass a device's security settings and subscribe infected phones to premium services, the company said.
RiskIQ performed its analysis using its own software that crawls app stores, websites, and Web ads. The technology, the company said, exposes malware that would otherwise not show itself to traditional Web crawler software.
Android apps were only counted as being malicious if they behaved in specific ways as a result of malware. The behavior may include collecting and sending GPS coordinates, contact lists and email addresses to third parties; recording phone conversations and sending them to attackers; taking control of the infected phone; or downloading other malware onto the phone.
The findings show that the rising prominence of mobile apps among consumers also makes them a juicy target for hackers. Reports of possible malware in clones of the popular Flappy Bird mobile game recently surfaced, even after it was removed from app stores.

"The explosive growth of mobile apps has attracted a criminal element looking for new ways to distribute malware that can be used to commit fraud, [commit] identity theft, and steal confidential data," said Manousos, in announcing the findings. Malicious apps are an effective way to infect users, he said, since they often exploit the trust people have in brands and companies they do business with.
But while the number of malicious Android apps is rising, the percentage of them removed by Google is on the decline, researchers said. In 2011 Google removed 60 percent of malicious apps, but in 2013 the company removed less than a quarter of them, the report said. That's probably due to the rapid increase in malicious software. Manousos told InfoWorld that he theorizes that Google takes down apps only after it has received enought complaints or alerts from security researchers, creating a delay in its takedowns to the 2013 surge. Unlike Apple, Google does not vet apps rigorously before they are made available in its app store, he noted.
Google said it would need more information about RiskIQ's analysis to comment on the findings.
Read more ...

Whatever happened to the IPv4 address crisis?

Tuesday 18 February 2014

The day of reckoning still looms -- it's just been pushed out as the major Internet players have developed ingenious ways to stretch those available numbers


In February 2011, the global Internet Assigned Numbers Authority (IANA) allocated the last blocks of IPv4 address space to the five regional Internet registries. At the time, experts warned that within months all available IPv4 addresses in the world would be distributed to ISPs.
Soon after that, unless everyone upgraded to IPv6, the world would be facing a crisis that would hamper Internet connectivity for everyone. That crisis would be exacerbated by the skyrocketing demand for IP addresses due to a variety of factors: the Internet of Things (refrigerators needing their own IP address); wearables (watches and glasses demanding connectivity); BYOD (the explosion of mobile devices allowed to connect to the corporate network); and the increase in smartphone use in developing countries.
[ Get the most out of your enterprise systems with hands-on know-how from InfoWorld'sNetworking Deep Dive special report. | Pick up expert networking how-to advice from InfoWorld's Networking Deep Dive PDF special report and Technology: Networking newsletter. ]
So, here we are three years later and the American Registry for Internet Numbers (ARIN) is still doling out IPv4 addresses in the United States and Canada.
[ ALSO ON NETWORK WORLD When will we turn off IPv4? ]
Whatever happened to the IPv4 address crisis?
The day of reckoning still looms -- it's just been pushed out as the major Internet players have developed ingenious ways to stretch those available numbers. But these conservation efforts can only work for so long.
ARIN currently has "approximately 24 million IPv4 addresses in the available pool for the region," according to President and CEO John Curran. They're available to ISPs large and small, but Curran predicts they will all likely be handed out by "sometime in 2014."
Even then, addresses will still be available to be assigned to the operators' clients for a while longer. And not all operators are likely to experience shortages at the same time. "It's more of a problem for networks that are growing. For networks that are stable, they can reuse addresses" as some customers drop their service and new ones sign up.
Phil Roberts, technology program manager for the Internet Society, adds, "There's some anticipation in using addresses. Network operators get a block and parcel them out -- you don't get them right when you need them."
How did we get here?
The problem took no one by surprise. The Internet Engineering Task Force (IETF) foresaw the global growth of network-connected devices 20 years ago, and in response drafted a new version of the Internet Protocol to address the looming shortage.
IPv6 uses a 128-bit address space -- that is, 2^128 -- yielding far more potential addresses than IPv4's 32-bit scheme, and in fact more addresses than there are grains of sand in the Earth's crust.
So, why hasn't everyone just switched over to IPv6?
Well, IPv6 is not backward compatible with IPv4, meaning network operators need to run a dual stack IPv4/IPv6 network for years to come. And for IPv6 to work, it needs to be implemented end to end, meaning IPv6 has to be enabled by network hardware vendors, transit providers, access providers, content providers, and endpoint hardware makers.
Since there's no economic incentive to being the first to invest in revamping your protocol support, many hardware and service providers stood on the sidelines and waited for momentum to build.
For enterprises, it made no sense to upgrade to IPv6 if their ISPs were still running IPv4. As John Brzozowski, fellow and chief architect for IPv6 at Comcast Cable, puts it: We had a chicken-and-egg problem. "Service providers didn't want to implement IPv6 because the content providers weren't there, and content providers didn't want to implement it because the service providers weren't there."
Plus, there were ways to avoid having to face the IPv6 music. One common technique is carrier-grade network (CGN) address translation (NAT), which translates private IP addresses within a carrier's network to a smaller number of public IP addresses in much the same way that ordinary NAT lets individuals and organizations use multiple internal IP addresses.
However, CGN brings with it a number of issues that limit its appeal. For one thing, it's expensive for carriers, and the money they spend on it could be more productively applied to IPv6-ready hardware. For another, a great deal of Internet infrastructure relies on the premise that a single public IP address uniquely identifies a carrier subscriber. CGN breaks that assumption, which means that it breaks geolocation services and impedes law enforcement organizations' ability to identify users.
Carriers can also purchase surplus IP addresses from other carriers. ARIN has a well-defined process that lets organizations transfer IPv4 addresses. Some organizations have also transferred addresses without ARIN approval -- what some have called a black market in IPv4 addresses.
ARIN is also helping to ease the pain by reclaiming unused addresses from, say, ISPs that have gone out of business, although that number is relatively small and won't materially affect the date upon which all IPv4 addresses are gone. ARIN is also now parceling out smaller and smaller blocks of IPv4 numbers and tightening the criteria for approval of new addresses.
But IPv4 workarounds will only last for so long and most organizations are recognizing that fact and moving, if grudgingly, to IPv6. Roberts says, "There's a light at the end of the tunnel."
Where are we headed?
Comcast recently announced that it now has the world's largest IPv6 deployment. In a post on Comcast's site, Brzozowski said, "Today, over 25 percent (and growing) of Comcast's Xfinity Internet customers are actively provisioned with native dual-stack broadband Internet service. Native IPv6 support has been deployed to over 75 percent of our broadband network, and our goal is 100 percent in early 2014."
Not all service providers have been as proactive, however. According to Internet Society measurements, Verizon shows no IPv6 presence.
All the major enterprise router vendors, and most vendors of small office routers, offer products with IPv6 support. A growing ISP or an expanding business should have no trouble finding hardware that supports IPv6.
As with IPv6 deployment among access providers, deployment among content providers is growing. Among websites, according to Roberts, the five top sites as measured by Alexa all support IPv6, and they account for a substantial portion of total IP traffic. One of those sites, Google, continually collects statistics about IPv6 adoption and shares them in a graph whose curve shows a steady upward trend.
However, while the shape of the curve is encouraging, in absolute terms the number of users accessing Google via IPv6 is barely above 3% of all users. Still, "that's more than double what it was a year ago," Roberts says, and IPv6 traffic is growing at a faster rate than IPv4, which Roberts sees as a promising sign.
The Internet Society also makes ongoing measurements of IPv6 deployment on its World IPv6 Launch site. It shows that 13 percent of the Alexa Top 1,000 websites are currently reachable over IPv6. "That number was 10 percent a year ago," Roberts said. In addition, the Internet Society checks the number of network operators who are turning on IPv6. "The first time [we reported on the statistics] we had about 70 networks," Roberts says. "Now we're up to 226."
With endpoint hardware providers, IPv6 readiness is a mixed bag. "A lot of devices in the home don't use it yet," Roberts says. However, the fast-growing cell phone market is a different story. Cell carriers are making progress supporting IPv6-enabled devices. For instance, Roberts points to Verizon Wireless. "All of its new smartphones have IPv6 enabled," he says, and T-Mobile recently announced that its Android 4.4 phones will default to IPv6 only for connecting to its mobile network.
Some gaming console manufacturers too are jumping on the bandwagon. In October, Microsoft's Chris Palmer announced at NANOG 59 that the Xbox One gaming console will use IPv6 with IPsec for peer-to-peer communication between gamers, and said that performance will be best when end-to-end communication is over IPv6.
That end-to-end, IPv6 connection may be elusive when content delivery networks are involved. Some CDNs, such as Limelight, turn on IPv6 by default for their customers, but others, such as Akamai, do not. Akamai's Erik Nygren says, "Most of our customers have very rich environments that still require end-to-end testing prior to dual-stacking."
One problem is that customer-premises equipment (CPE) has to be capable of supporting IPv6 and properly configured to do so, and not all CPE currently in production can claim that. Nevertheless, Akamai reported in June that roughly 1.5 percent of the content requests it sees come in over IPv6 -- a rate that is about double what it saw a year previously.
Over the entire network ecosystem, including carrier hardware and networks, CDNs, corporate networks, home electronics, mobile devices, and content providers, there is steady progress in IPv6 implementation.
Bottom line
Unallocated IPv4 address blocks are gone forever. However, carriers still have IPv4 addresses available for allocation, so IPv4 addresses will remain in use for some time to come. And though there may be no immediate crisis for service providers, businesses, or customers, there is steady pressure to enable IPv6 in every segment of the network ecosystem as the best way to address IPv4 address scarcity.

No one seems willing to predict a date by which the last IPv4 packet will traverse the Internet backbone, but we are seeing clear progress toward IPv6 critical mass in the form of dual-stack implementations in enterprise, mobile, and home-based devices and operating systems.
Once it becomes clear we've reached an inflection point, when service and content providers can count on dual-stack users, and users can count on the availability of IPv6-enabled content, the pace of adoption should quicken. Just as no one needs to be the first to support IPv6, no one wants to be last either.
The reality is, Roberts says, "It takes a while to transition. After all this is done it would be a great graduate thesis for someone to see why it has taken so long."
Read more ...

folder lock apps

Sunday 16 February 2014
 Desktop  Phone
Folder Lock®
  • Lock, Encrypt, Sync files
  • Wallet, Shredder, Cleaner
  • 25+ Privacy/Security tools!
USB Secure
  • Password Protect USB Drive
  • Complete Portable Security
  • Protect all files instantly!
Folder Protect
  • Lock & Hide files & folders
  • Prevent Delete & Modification
  • Access Control files Any Way!
Copy Protect
  • Copy Protect your media files
  • Files run on only Opted Drives!
  • Date-in-Use security method
Folder Lock
  • Protect Photos, Audios
  • Lock & Hide Videos
  • Secure Documents
  • Write Secure Notes
  • Record Voice Secretly
  • Save Protected Wallets
  • Browse Securely
Read more ...

TCS hires 21,000 via campus hiring, to hire 4,000 more

Sunday 16 February 2014
TCS hires 21,000 via campus hiring, to hire 4,000 more
(PHOTO: Reuters)
Tata Consultancy Services (TCS), India's largest software services provider, will soon complete campus hiring for the next financial year, which it has pegged at 25,000.
"We have already hired close to 21,000 and the remaining will also be completed shortly," TCS global HR head Ajoy Mukherjee told reporters on the sidelines of the annual Nasscom leadership summit in Mumbai on Thursday.
He said the company has already visited as many as 350 campuses to recruit the remaining 4,000 persons, adding a number of institutes have requested TCS to visit them.
Admitting that the hiring scenario for the industry is "not good", Mukherjee said: "Lots of requests have come to us from institutes."
He said TCS has made the campus hiring online.
Mukherjee, however, said that the non-campus hiring plan for the next financial year is still being worked out and will be announced at the time of the fourth quarter results. "TCS is still finalising the business plan for the next fiscal and has not yet decided on the off-campus hiring yet," he added.
For more news from Business Today, follow us on Twitter @bt_india and on Facebook atfacebook.com/BusinessToday
Read more ...

Infosys to set up delivery centre in Brazil

Sunday 16 February 2014
Infosys to set up delivery centre in Brazil
Expanding its presence in Latin America, software services major Infosys on Thursday said it would establish a delivery centre in Araraquara (Brazil), which will deliver application management services for clients.
Initially, the 100-seat facility in Brazil will house 25 people and provide SAP Application Management services to Citrosuco, the world's leading orange juice producer.
"With this new centre, Infosys and its subsidiaries are further expanding their footprint in Latin America with operations across Brazil, Costa Rica, Puerto Rico, Mexico and Argentina, employing over 1,700 people," India's second largest software services exporter said in a statement.
Favourable business environment created by the government and availability of a highly skilled, multilingual workforce makes Brazil an ideal location for the new delivery centre, it added.
The centre will also deliver application management services supporting critical business operations, including SAP ERP systems to other clients across Brazil.
"The new facility in Brazil will be a key part of our global network of delivery centres. It will strengthen our ability to drive innovation and growth for our clients in Latin America," Infosys Brazil Country Head Claudio Elsas said.
Infosys had set up operations in Brazil in 2009 and the company and its subsidiaries employ more than 700 people in the country.
Of late, Indian IT firms have been increasingly looking at South America for BPOs, KPOs and call centres as it can be used in a near-shore business model to service their North American clients. This also leads to lesser requirement of visas for their employees, thereby reducing costs.
North America contributes to over 60 per cent of the revenues of the USD 108 billion India IT-ITes sector.

Read more ...

JNTUK 2014 4-2 R10 1st Mid Online Bits of All Branches

Sunday 16 February 2014

JNTUK 2014 4-2 R10 1st Mid Online Bits of All Branches

jntuk 4-2 1st Mid Online Bits R10
A
ACA :: Download | View Online
AIM :: Download | View Online
ACD :: Download | View Online
AI :: Download | View Online
C
CSC :: Download | View Online
D
DDB : Download | View Online
Digital Image Processing : Download | View Online
DSP : Download | View Online
DWDM : Download | View Online
E
ECOM : Download | View Online
Embedded System : Download | View Online
EMI :  Download | View Online
H
HCI : Download | View Online
I
IS : Download | View Online
M
MULTIMEDIA (MAD) : Download | View Online
N
NT(Nanotechnology) : Download | View Online
NMS : Download | View Online
NNFL : Download | View Online
O
OC : Download | View Online
Object Oriented Programming Through Java (OOPS) : Download | View Online
P
PPC : Download | View Online
PPE :  Download | View Online
S
SE : Download | View Online
TV :  Download | View Online
Satellite Communications : Download | View Online
U
UEE : Download | View Online
Unix : Download | View Online
W
WCN : Download | View Online
WT : Download | View Online


Read more ...