Embedded Linux Conference + Android Builders Summit

Android devices -smartphones and tablets- are increasingly ubiquitous, used for work, personal, and geographic mobility needs. While the usage model (one app at a time) can naturally extend to consolidate these uses, the ability to do so securely is missing. Hypervisors are unsuitable for the task, and userspace sandboxes offer little in terms of security. This talk will present a solution for running multiple virtual Android instances on a single device, for example one personal and one for work. We leverage lightweight virtualization to introduce true multi-persona functionality combining security, performance, and usability, with remarkably rapid system bring up times. The talk will describe how Android drivers (e.g. Binder, Wakelocks) are handled and how hardware is properly multiplexed, including a live demo showing two
virtual phones running simultaneously on one phone.

This presentation is intended for anyone interested in Android security and virtualization. The talk is especially relevant for attendees interested in business oriented solutions for Android that require higher level of security and isolation.

This presentation will help Android developers and Android product managers understand the challenges of creating a truly secure environment in Android and will hopefully provide them and the companies that they work for with the tools to correctly assess the level of security in their products.