From vulnerability mining to privacy protection Chianxin Pangu Labs all-round guarding Hongmeng ecological security

Recently, as a leader in the field of mobile security, QIANSHENG Pangu Labs, relying on combat-ready mobile security attack and defense capabilities, has reached a deep cooperation with Huawei, relying on years of accumulated mobile combat-ready cybersecurity capabilities, from the underlying chip to the upper layer of the application, and from the vulnerability attack and defense to privacy protection, to provide a full range of technical support for the security of HarmonyOS.

In early June, HarmonyOS 2 was released for consumers on cell phones and tablet PCs, and the number of users exceeded 10 million in just one week. As a distributed operating system for the whole scenario, HarmonyOS is based on distributed technology that can connect various smart terminals that consumers come into contact with in their lives, and form a super terminal according to their needs. The smooth experience brought by this kind of speedy discovery, speedy connection, hardware mutual assistance and resource **** enjoyment is what HarmonyOS sees as the world of Internet of Everything.

But at the same time, the network threats facing the mobile platform are only increasing. Whether it's the familiar apps that over-collect users' privacy, malware pushing ads, or the banking Trojans seeking economic benefits, malware stealing secrets, and targeted mobile advanced threats (APTs), all of them are seriously affecting the property and privacy security of governmental and corporate organizations and individual consumers. The HarmonyOS is the first of its kind in the world, and it is the first of its kind in the world to be used in a new way.

In this regard, Huawei has always regarded the privacy and security of users as the lifeline of HarmonyOS, and in the early stage of HarmonyOS development, it has carried out a comprehensive network security construction. It is understood that HarmonyOS security capabilities have reached the industry's leading level: TEE OS security kernel by the world's commercial operating system kernel of the highest security level of CC EAL5 + certification; HarmonyOS by the Chinese IT product information security certification EAL4 +, is the current through the highest level of China's security certification of the operating system.

In addition, HarmonyOS also has distributed security capabilities from single device to multi-device interconnection, which can ensure that "the right person is on the right device, using the data correctly", and guarantee the security of each access to each device in the whole scenario, as well as the security of each data storage, transmission, and use.

In order to further enhance the security level of HarmonyOS and create a safe and open Hongmeng ecosystem, Huawei actively carries out in-depth cooperation with ecological partners.

It is reported that, as early as before the launch of HarmonyOS, Chianxin Pangu Lab has cooperated with Huawei many times to provide security support for Huawei. With its leading combat attack and defense capabilities, Chianxin Pangu Labs has won the Huawei Terminal Security 2019 Outstanding Contribution Award.

Relying on years of experience in mobile security attack and defense, Chianson Pangu Labs is able to provide HarmonyOS ecosystem with a full range of security and protection services, including code auditing, loophole mining, application hardening, privacy monitoring, and emergency response, from the bottom-layer secure boot chain, operating system design, and baseband, to the upper-layer user-based privacy protection framework, distributed protocol security, and so on.

As an internationally renowned mobile security research team, Pangu Labs has discovered hundreds of 0day security vulnerabilities in mainstream operating systems and critical applications, and has professional mobile security protection strength and rich experience in attack and defense, and its research results have been published in influential industrial security summits (Black Hat, CanSecWest, Syscan, RUXCON). Our research results have been presented at influential industrial security summits (Black Hat, CanSecWest, Syscan, RUXCON, HITCon, PoC, XCon) and top academic conferences (IEEE S&P, USENIX Security, ACM CCS, NDSS). The team's research covers iOS, Android, Windows, HarmonyOS and other mainstream mobile platforms, and has developed a number of stellar mobile security products, including Android security assessment and detection platform, malware detection and detection platform, mobile application privacy detection platform, and mobile threat intelligence mining platform, which have been widely praised by customers.

Leifeng.com Leifeng.com