ANALYSIS OF TYPES OF CYBER PROTECTION IN MOBILE PHONE OPERATING SYSTEMS

Abstract

Modern mobile devices have become an integral part of everyday life and are actively used for both personal and corporate purposes. This has led to an increase in the number of cyber threats targeting smartphones. This article analyzes the types of cyber protection implemented in mobile phone operating systems, such as Android and iOS. Hardware and software security methods, architectural features, and data protection mechanisms are considered. The article contains a comparative table of approaches of the two leading OSes, schemes of protection levels, and a description of the functioning of the main technologies: encryption, authentication, sandboxing, and permission control. Typical threats and methods for neutralizing them are also discussed. Types of cyber protection have been described and classified, their protection mechanisms and implementation examples have been considered. Hardware protection mechanisms are considered using the example of Secure Enclave (Apple) and Titan M (Google Pixel), and a comparison scheme is presented. Software protection is presented using the example of sandboxing and permission control. Authentication and access control methods are listed, a formula for assessing password strength with an example is considered. Network and cloud protection mechanisms such as VPN and secure DNS, Private Relay (iCloud+) and Google Play Protect will be highlighted. The scheme of operation of Private Relay and Google Play Protect is clearly presented. Typical threats to mobile phone operating systems are also shown and a comparative review of Android and iOS security systems is presented according to various criteria. All of this is aimed against malware for mobile device data security. The conclusions are based on a generalization of current implementations of cyber protection, scientific publications and practical research. The presented material may be useful to information security specialists, mobile application developers and users interested in personal data protection.