Offensive security assessments

Android Architecture

Android architecture contains different components to support various device needs. The software is built upon an open-source Linux Kernel, comprising a collection of C/C++ libraries exposed through application framework services. Among all the components, the Linux Kernel provi…

Why it matters

Android architecture contains different components to support various device needs. The software is built upon an open-source Linux Kernel, comprising a collection of C/C++ libraries exposed through application framework services. Among all the components, the Linux Kernel provides the main functionality of operating system functions to smartphones, while the Dalvik Virtual Machine (DVM) provides a platform for running an Android application.

How we test it

Our operators follow a structured checklist for this topic, adapted to your API surface and authentication model.

Testing approach

  • Applications represent the top layer of the Android architecture.
  • Includes pre-installed applications like Home, Contacts, Camera, Gallery, etc., and third-party applications downloaded from the Play Store.
  • It runs within the Android runtime with the help of the classes and services provided by the application framework.
  • Application Framework provides several important classes used to create an Android application.
  • Provides a generic abstraction for hardware access and manages the user interface with application resources.
  • Includes services like activity manager, notification manager, view system, package manager, etc.
  • Classes.dex: This file contains the compiled Java bytecode for the application’s classes, which are executed by the Android Runtime (ART)
  • Resources.arsc: This file contains compiled resources such as strings, images, and layouts that are used by the application

What we look for

  • Applications represent the top layer of the Android architecture.
  • Includes pre-installed applications like Home, Contacts, Camera, Gallery, etc., and third-party applications downloaded from the Play Store.
  • It runs within the Android runtime with the help of the classes and services provided by the application framework.
  • Application Framework provides several important classes used to create an Android application.
  • Provides a generic abstraction for hardware access and manages the user interface with application resources.
  • Includes services like activity manager, notification manager, view system, package manager, etc.
  • Classes.dex: This file contains the compiled Java bytecode for the application’s classes, which are executed by the Android Runtime (ART)
  • Resources.arsc: This file contains compiled resources such as strings, images, and layouts that are used by the application

Related topics

TopicSummary
Dynamic_TestingWe validate this area during scoped assessments, documenting impact and remediation guidance.