Worth Reading: Android security overview
Google's Android Open Source Project (AOSP) has released an overview of Android's security features. The document explains concepts such as the application sandbox, the permission management framework and inter-process communication. Other subjects that are touched on include cost-sensitive APIs (such as those with access to calls and text messages) and the provisions in the OS to deal with personal data on devices. Regarding security-sensitive updates, the document explains the process that Google and the AOSP go through in fixing vulnerabilities in critical OS components.
In several places, the documentation includes links to more in-depth discussions of features, such as for the implementation of encryption in Android.
- Android Security Overview, published by the Android Open Source Project.