强化或保护 Android 设备
有没有办法加固 Android 设备？例如，我的公司想为我们的客户提出申请。我们将在选定的 Android 设备上安装该应用程序。由于我们的应用程序具有敏感数据，因此我们不希望任何人能够在设备上安装我们提供的应用程序以外的任何内容。有没有办法强化或保护 Android 设备，使其为企业做好准备？任何链接或线索都会有帮助。
Is there a way to harden an android device? For example, my company wants to make an application for our clients. We will install the application on a selected android device. Since our application has sensitive data, we don't want anyone to be able to install anything other than the application we provide on the device. Is there a way to harden or secure an android device to make it enterprise ready? Any link or leads would be helpful.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
在 OS 2.2 中，Android 引入了从应用程序内强制执行设备级密码策略并远程擦除设备的功能，例如，从 OS 2.1 开始，默认 Android 电子邮件应用程序支持用于密码策略和远程擦除的 Microsoft Exchange 策略。
不幸的是，目前我认为没有办法强制在设备上安装哪些应用程序。
用于设备级密码策略和远程擦除的设备管理 API（在 OS 2.2 中引入）：
http://developer.android.com/guide/topics/admin/device -admin.html
有关 OS 2.2 功能的一般链接：
http://www.computerworld.com/s/article/9179423/With_2.2_release_Android_for_the_enterprise_deserves_a_second_look
In OS 2.2 Android introduced the ability to enforce a device level password policy from within an app and to remote wipe the device, e.g. from OS 2.1 the default Android e-mail application supports Microsoft Exchange policies for password policies and remote wipe.
Unfortunately at this time I don't think there is a way to enforce which applications can be installed on a device.
Device admin API for device level password policies and remote wipe (introduced in OS 2.2):
http://developer.android.com/guide/topics/admin/device-admin.html
General link about OS 2.2 features:
http://www.computerworld.com/s/article/9179423/With_2.2_release_Android_for_the_enterprise_deserves_a_second_look
互联网安全中心 http://cisecurity.org 正在起草一个关于如何做到这一点的基准。社区链接位于：https://community.cisecurity.org
这是 pdf 文件的链接
https://benchmarks.cisecurity.org/en-us/ ?route=downloads.form.android.100
The Center for Internet Security http://cisecurity.org is drafting a benchmark on how to do this. The community link is here: https://community.cisecurity.org
This is the link to the pdf file
https://benchmarks.cisecurity.org/en-us/?route=downloads.form.android.100
听起来 SEAndroid 会很有趣，它被称为 Android 的安全增强版本，NSA 是很大的贡献者。
具体来说，Android SE 旨在提供：
命令、
Sounds like SEAndroid will be of interest, it's dubbed as the security enhanced version of Android, the NSA are big contributors.
Specifically, Android SE aims to offer:
commands,
为了实现您的建议，您需要构建操作系统的自定义版本并对系统进行必要的修改以阻止应用程序安装。您可以只允许安装一个应用程序，也可以将应用程序作为操作系统的一部分预安装，但不允许安装任何应用程序。不幸的是，修改 Android 来实现这一目标并非易事。
To accomplish what you're suggesting, you'd need to build a custom version of the OS and make the necessary modifications to the system to block app installations. You could either only allow one app to be installed, or you could preinstall your app as part of the OS and not allow any app installations. Unfortunately, modifying Android to accomplish this goal will be nontrivial.
有一些公司提供 Android 设备安全框架，可以强化和保护您的 Android 系统。查看 https://mocana.com/dsf-android.html
There are some companies providing a Device Security Framework for Android which can harden and secure your android system. Check out https://mocana.com/dsf-android.html