How Android Enterprise supports a Zero Trust security model
Skip to main content
How Android Enterprise supports a Zero Trust security model
Innovation & AI
Products & platforms
Company news
Feed
Subscribe
Back
Innovation & AI
See all in Innovation & AI
Models & Research
Google DeepMind
Google Research
Google Labs
Gemini models
Quantum computing
See all
Products
Developer tools
Gemini app
Gemini Notebook
See all
Infrastructure & cloud
Global network
Google Cloud
See all
Technology
Safety & Security
Health
See all
Learn more:
Google DeepMind blog
Google Research blog
Google Developers blog
Google Cloud blog
Back
Products & platforms
See all in Products & platforms
Products
Search
Maps
Chrome
Google Health
Google Workspace
Learning & Education
Shopping
See all
Platforms
Android
Google Play
Wear OS
See all
Devices
Pixel
Google Nest
Fitbit
Chromebooks
See all
Learn more:
Google Ads & Commerce blog
Waze blog
Back
Company news
See all in Company news
Outreach & initiatives
Creating opportunity
Safety & security
Google.org
Public policy
Sustainability
Health
See all
Leadership
Sundar Pichai, CEO
More authors
See all
Inside Google
Around the globe
Life at Google
See all
Learn more:
Google Security blog
Innovation & AI
Innovation & AI
See all in Innovation & AI
Models & Research
Google DeepMind
Google Research
Google Labs
Gemini models
Quantum computing
See all
Products
Developer tools
Gemini app
Gemini Notebook
See all
Infrastructure & cloud
Global network
Google Cloud
See all
Technology
Safety & Security
Health
See all
Learn more:
Google DeepMind blog
Google Research blog
Google Developers blog
Google Cloud blog
Products & platforms
Products & platforms
See all in Products & platforms
Products
Search
Maps
Chrome
Google Health
Google Workspace
Learning & Education
Shopping
See all
Platforms
Android
Google Play
Wear OS
See all
Devices
Pixel
Google Nest
Fitbit
Chromebooks
See all
Learn more:
Google Ads & Commerce blog
Waze blog
Company news
Company news
See all in Company news
Outreach & initiatives
Creating opportunity
Safety & security
Google.org
Public policy
Sustainability
Health
See all
Leadership
Sundar Pichai, CEO
More authors
See all
Inside Google
Around the globe
Life at Google
See all
Learn more:
Google Security blog
Feed
How Android Enterprise supports a Zero Trust security model
Share
x.com
Facebook
LinkedIn
Mail
Copy link
["How can I learn new AI skills?", "What is Gemini Spark?", "How can Gemini help me study?"]
Preferences
Global (English)
Africa (English)
Australia (English)
Brasil (Português)
Canada (English)
Canada (Français)
Česko (Čeština)
Deutschland (Deutsch)
España (Español)
France (Français)
Greece (Ελληνικά)
India (English)
Indonesia (Bahasa Indonesia)
Ireland (English)
Italia (Italiano)
日本 (日本語)
대한민국 (한국어)
Latinoamérica (Español)
الشرق الأوسط وشمال أفريقيا (اللغة العربية)
MENA (English)
Nederlands (Nederland)
New Zealand (English)
Polska (Polski)
Portugal (Português)
România (Română)
Sverige (Svenska)
ประเทศไทย (ไทย)
Türkiye (Türkçe)
台灣 (中文)
Links
Images
RSS feed
x.com
Facebook
LinkedIn
Mail
Copy link
Subscribe
Breadcrumb
Home
Products & Platforms
Products
Android Enterprise
How Android Enterprise supports a Zero Trust security model
Sep 23, 2020
|
x.com
Facebook
LinkedIn
Mail
Copy link
Eugene Liderman
Director, Android Security & Privacy Team
Share
x.com
Facebook
LinkedIn
Mail
Copy link
The surge in remote and mobile working has put an increased emphasis on how organizations should best manage and secure device access to critical information. New research from Omdia, in a survey of 700 IT decision makers, found that businesses are  expanding and strengthening access controls now that many employees spend very little or no time in the office.
This has piqued interest in the Zero Trust security model, which is built on the premise that access to corporate resources should continuously be verified. In the Omdia survey, 31 percent of the respondents are currently using Zero Trust, with another 47 percent planning to do so in the near future.
Understanding the Zero-Trust security model
The Zero Trust security model enables a mobile and remote workforce to securely connect to company resources from virtually anywhere. Devices are vetted before being granted access to company resources. Companies can use tight, granular controls to specify the level of access whether the devices are connected to a corporate network, from home, or elsewhere.
An effective Zero Trust implementation requires numerous device signals, context and controls to make intelligent decisions about access. A key piece of a Zero Trust architecture is the enforcement point, which is the identity or network component that grants or denies access based on the various device and user signals that are available. For example, the enforcement point may decline access to devices that do not have the most recent security patch or show signs of running a compromised operating system.
A Zero Trust diagram showing how various device and user signals are used as part of contextual rules that dictate the control.
How Android enables a Zero Trust security approach
Android has a wealth of platform features and APIs that our enterprise mobility management and security partners leverage to safeguard backend services and resources. Let’s look at how Android provides the building blocks you need for a Zero Trust deployment.
Android provides a variety of device signals that administrators can use in building systems to verify the security and integrity of devices. In a Zero Trust model, these signals are used to assess whether a device should be allowed to access corporate information.
The first thing that needs to be checked is the OS version and Security Patch Level of the device. The SafetyNet Attestation API verifies a device has not been rooted, while the SafetyNet VerifyApps API checks for the presence of malware. Admins can also confirm if applications are complying with Android security standards. The NetworkEvent and SecurityLog logs provide data to check for any suspicious activity or anomalies on devices.
The next aspect is context:
Who is trying to access a particular resource—are we sure that this is in fact the right device and person?
What resource are they trying to access—is this resource restricted to a select audience or region?
When are they trying to access it—is this during work hours or after hours?
Where are they trying to access it from—are they in their normal region or traveling?
How are they attempting to access it—are they accessing this from a web app or native app, is the device fully managed or BYOD?
Why do they need to access it—is this someone who typically accesses this information?
Putting Zero Trust to work for you
Now that we have device security signals and the context we can decide how to control the access to the information.
Here are some examples:
If a user is on a rooted device — no access.
If a user is traveling international — limited access.
If a user is trying to access a resource for the first time in a while — prompt for a second factor during the authentication flow.
The Android platform provides the signals and intelligence in order to understand the context and define appropriate controls in a Zero Trust deployment. What makes Android unique as a Zero Trust endpoint is that unlike other operating systems where you need to rely on the Enterprise Mobility Management (EMM) solution to gather the appropriate device signals and attributes, on Android access to these signals can be delegated so that which ever component is acting as the enforcement point; whether it be the identity provider or the network access control component, can collect all of the necessary information directly off the endpoint device as opposed to integrating with a multitude of backend systems.
If you are currently using Zero Trust or moving in that direction, make sure to confirm that your EMM or your enforcement point can access the plethora of signals directly from the device. And check out the Omdia security report to learn more about growing adoption of Zero Trust security.
POSTED IN:
Android Enterprise
Related stories
Android Enterprise
Why B3 chose Android for secure AI-enabled productivity
By
Raul Chavarria
Android
5 new features for Android XR
By
Juston Payne
Android Enterprise
Simplifying messaging compliance for businesses with Android RCS Archival on Pixel
By
Ian Marsanyi
Android Enterprise
Protecting São Paulo citizens from theft with Android Enterprise
By
Captain Bruno Pettinato
Android Enterprise
Android delivers secure AI innovation to West Midlands Police
By
Gregg Hudson
Android Enterprise
BBVA secures 100,000 devices with Android Enterprise
By
Manuel Cerrillo Bermejo
Let's stay in touch. Get the latest news from Google in your inbox.
Subscribe
No thanks
Privacy
Terms
Help
More of Google
Google Products
About the Blog
Global (English)
Africa (English)
Australia (English)
Brasil (Português)
Canada (English)
Canada (Français)
Česko (Čeština)
Deutschland (Deutsch)
España (Español)
France (Français)
Greece (Ελληνικά)
India (English)
Indonesia (Bahasa Indonesia)
Ireland (English)
Italia (Italiano)
日本 (日本語)
대한민국 (한국어)
Latinoamérica (Español)
الشرق الأوسط وشمال أفريقيا (اللغة العربية)
MENA (English)
Nederlands (Nederland)
New Zealand (English)
Polska (Polski)
Portugal (Português)
România (Română)
Sverige (Svenska)
ประเทศไทย (ไทย)
Türkiye (Türkçe)
台灣 (中文)