The security model of smartphone platforms has,
under these circumstances, two contradicting goals.
On the one hand, it must provide mechanisms to
protect the users from attacks and on the other hand,
it must attract third party developers, since the popularity of a platform depends on the attractiveness of
its applications. The former goal is approached by
each smartphone platform under a non unified and
standardised approach that its effectiveness is controversial (Sophos, 2011). For the latter smartphone
platforms provide developers with development
friendly environments that include extensive documentation, programming libraries, and emulators.
However, this development friendliness may also be
used to write applications that can compromise the
security and privacy of smartphone users more
easily.