OWASP SeraphimDroid Project

=Main=



{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 * valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

OWASP SeraphimDroid
OWASP Seraphimdroid is a privacy and security protection app for Android devices. It enables users to protect their devices against malicious software (viruses, trojans, worms, etc.), phishing SMS, MMS messages, execution of dangerous USSD codes, theft and loosing. Also, it enables user to protect their privacy and to control the usage of applications and services via various kinds of locks.



Introduction
OWASP Seraphimdroid is a privacy and security protection app for Android devices. It enables users to protect their devices against malicious software (viruses, trojans, worms, etc.), phishing SMS, MMS messages, execution of dangerous USSD codes, theft and loosing. Also, it enables user to protect their privacy and to control the usage of applications and services via various kinds of locks. It also enables remote locking and wiping, geofencing and various other protections against phishing, malware and theft. It can also be used for parental control of what applications can be used, what can be installed or uninstalled on device. Application has also educational purpose to teach and point out risks and threats for security and privacy of mobile users.

Project development is done on GitHub: https://github.com/nikolamilosevic86/owasp-seraphimdroid

Release of OWASP Seraphimdroid is available on Google Play: https://play.google.com/store/apps/details?id=org.owasp.seraphimdroid

Description
The aim of this project is to research all threats and risks coming from permissions and to actively alarm user of the application about those risks. Also, using different kind of heuristics and machine learning SeraphimDroid application should keep user data and money safe. Application should prevent other applications to execute actions that cost money without user's knowledge and acknowledgement.

The secondary goal of the project is to publish documentation about researched topics, such as how can some permissions be misused, what are the heuristic approaches to prevent other application executing malicious actions etc.

Licensing
GNU GPL v3 License (allows commercial use, but requires that modifications to your code stay open source, thus prohibiting proprietary forks of your project)


 * valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

What is OWASP SeraphimDroid?
OWASP SeraphimDroid provides:


 * Documentation on how Android permissions can be misused
 * Security Android application
 * Application that keeps user secure and teaches him about risks

Presentation
OWASP Mobile Top 10 and OWASP Seraphimdroid

Project Leader
Nikola Milosevic [mailto:nikola.milosevic@owasp.org]

Related Projects

 * OWASP_Mobile_Project

Ohloh

 * https://www.ohloh.net/p/owasp-seraphimdroid


 * valign="top" style="padding-left:25px;width:200px;" |

Quick Download

 * Google Play: https://play.google.com/store/apps/details?id=org.owasp.seraphimdroid
 * Code: https://github.com/nikolamilosevic86/owasp-seraphimdroid
 * Documents and publications:
 * Documentation v1: https://github.com/nikolamilosevic86/owasp-seraphimdroid/blob/gsoc/Documentation.docx
 * Article about android permissions, published by Digital Forensics magazine: http://inspiratron.org/AndroidSecurity.pdf

News and Events

 * (10.7.2015) OWASP Seraphimdroid is participating at OWASP Summer Code Sprint 2015

Classifications

 * }

=FAQs=


 * Q1
 * A1


 * Q2
 * A2

= Acknowledgements =

Volunteers
OWASP SeraphimDroid is developed by a worldwide team of volunteers. The primary contributors to date have been:


 * Nikola Milosevic
 * Aleksandar Abu Samra
 * Chetan Karande
 * Ali Tekeoglu
 * Furquan Ahmed

Others

 * xxx

= Road Map and Getting Involved = As of SeraphimDroid, the priorities are:
 * MVP development of Android security application with educational content
 * Documenting approaches taken during the development
 * Try to publish some papers
 * Further development and improvement

Involvement in the development and promotion of SeraphimDroid is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:
 * Help coding open source security app
 * Write project documentation
 * Research possible permission misuse

If you want to contribute please contact project leader Nikola Milosevic [mailto:nikola.milosevic@owasp.org]

=Project About=