Exclusive: MWR InfoSecurity unveils open-source Android app testing platform

MWR InfoSecurity is to launch an Android security testing framework this afternoon on the Blackhat EU conference.

Speaking to SC Magazine, MWR InfoSecurity managing director Ian Shaw said the technology is called Mercury and is designed to analyse security vulnerabilities in Android applications.

The company claimed that following media coverage of security issues on Android phones, and in light of the indisputable fact that researching vulnerabilities in cell phones is time-consuming, the tool have been designed to permit testing of applications before, during and after development.

Shaw said: “This comes with the Android platform that OEM vendors have taken and added to links to attenuate security vulnerabilities within the development process. This can be a tool to identify while you are making mistakes and add support for developers.

“The app is a compliment to the server, it's loaded onto the telephone and asks for a single permission of access to the net that any app asks for. It'll come again with tips on corrections and review other applications and content providers.

“For businesses seeking to use Android devices and review environments form a safety perspective, this can be a tool to apply as there are various issues within the security development lifecycle within the Android platform.”

MWR InfoSecurity said the tool have been used already to spot multiple vulnerabilities, and it has informed phone manufacturers of those issues.

Mercury is being released in an open-source form, available at www.mwrinfosecurity.com.