Google has announced raising the amount of Android Security Rewards on the occasion of the first anniversary of the Rewards. It was a year ago that Google had instituted the Android Security Rewards. In the course of one year, over 250 qualifying vulnerability reports from researchers were received and have been used to make Android and mobile security stronger. Yes, Google works round the year to come up with Android antivirus strategies for all.
A recent post in the ‘Android Developers Blog’ says- “A year ago, we added Android Security Rewards to the long standing Google Vulnerability Rewards Program. We offered up to $38,000 per report that we used to fix vulnerabilities and protect Android users.Since then, we have received over 250 qualifying vulnerability reports from researchers that have helped make Android and mobile security stronger.” The blog further says- “While the program is focused on Nexus devices and has a primary goal of improving Android security, more than a quarter of the issues were reported in code that is developed and used outside of the Android Open Source Project. Fixing these kernel and device driver bugs helps improve security of the broader mobile industry (and even some non-mobile platforms).”
Android antivirus strategies by Google are definitely going great. That’s what the statistics show. In the last one year Google has paid over $550,000 to 82 individuals (an average of $2,200 per reward and $6,700 per researcher). Google paid it’s top researcher, @heisecode, $75,750 for 26 vulnerability reports and paid 15 researchers $10,000 or more. All this happens when we Android users think being armed with Android antivirus itself is enough. Yes, Android antivirus is a must, for all Android devices; of course you should get a good, trusted Android antivirus as soon as you get an Android device.
The Google Vulnerability Rewards Program is being improved now. This is what the ” says about the improvement plans-
“We’re constantly working to improve the program and today we’re making a few changes to all vulnerability reports filed after June 1, 2016.
We’re paying more!
- We will now pay 33% more for a high-quality vulnerability report with proof of concept. For example, the reward for a Critical vulnerability report with a proof of concept increased from $3000 to $4000.
- A high quality vulnerability report with a proof of concept, a CTS Test, or a patch will receive an additional 50% more.
- We’re raising our rewards for a remote or proximal kernel exploit from $20,000 to $30,000.
- A remote exploit chain or exploits leading to TrustZone or Verified Boot compromise increase from $30,000 to $50,000.”
So next time you’re using an Android device and Android antivirus, just remember, there are lots of researchers out there who are working out real Android antivirus strategies.