With the increasing threat of mercenary spyware and targeted attacks, tech companies such as Google, Apple, and Microsoft are working to enhance security for vulnerable users. A significant response came from Apple in 2022 with the introduction of iOS Lockdown Mode, which prioritizes security even at the cost of some functionality. This brings substantial benefits to individuals facing threats, such as public figures, activists, and journalists.
Building on this trend, Google is extending its Advanced Protection program—previously focused on safeguarding Google accounts—with new features now available for Android 16. Recently, Google announced an Advanced Protection mode for Android devices, which aims to provide heightened security through strict settings that limit data sharing and interactions with unsecured services.
This mode employs Google’s AI capabilities to monitor and provide alerts while allowing users to maintain some device functionality. However, it includes non-negotiable restrictions, such as prohibiting connections to legacy 2G networks and disabling Chrome’s JavaScript optimizer, which could affect website functionality.
Dave Kleidermacher, Google’s vice president of engineering for Android security, explained that the system not only aims to harden defenses but also introduces Intrusion Logging. This feature leverages end-to-end encryption to create immutable logs stored in the cloud, accessible only by the user. This approach could prove critical in the event of a security breach, allowing users to analyze their logs with the help of security experts.
Although similar monitoring tools are prevalent on desktops and in enterprise environments, they are less common in consumer mobile devices. However, leveraging cloud capabilities through Google’s existing encrypted platforms helps manage risks associated with data being moved off the device.
Another integral feature of Advanced Protection is the Memory Tagging Extension (MTE), designed to provide hardware-level security by preventing attacks that exploit memory vulnerabilities. By making such attacks significantly harder, MTE acts as a deterrent against a common hacking technique known as buffer overflow.
Most features of Advanced Protection will roll out with Android 16 soon, while Intrusion Logging and additional USB protections will follow later in the year. Google is also developing APIs to allow third-party apps to incorporate these enhanced security features, further broadening protective measures across the mobile ecosystem.
The Advanced Protection mode represents Google’s commitment to creating a more secure environment for at-risk individuals, making it more challenging for attackers to successfully compromise devices.
