# Malware Analysis in IoT & Android Systems with Defensive Mechanism
###### Abstract  
The Internet of Things (IoT) and the Android operating system have made cutting-edge technology accessible to the general public. These are affordable, easy-to-use, and open-source technology. Android devices connect to different IoT devices such as IoT-enabled cameras, Alexa powered by Amazon, and various other sensors. Due to the escalated growth of Android devices, users are facing cybercrime through their Android devices. This article aims to provide a comprehensive study of the IoT and Android systems. This article classifies different attacks on IoT and Android devices and mitigation strategies proposed by different researchers. The article emphasizes the role of the developer in secure application design. This article attempts to provide a relative analysis of several malware detection methods in the different environments of attacks. This study expands the awareness of certain application-hardening strategies applicable to IoT devices and Android applications and devices. This study will help domain experts and researchers to gain knowledge of IoT systems and Android systems from a security point of view and provide insight into how to design more efficient, robust, and comprehensive solutions. This article discusses different attack vectors and mitigation strategies available to both developers and in the open domain. Certain guidelines are also suggested for application and platform developers, as well as application databases (Google play store), to limit the risk of attack, and users can form their own defense with knowledge regarding keeping hardware and software updated and securing their system with a strong password. IoT; android system; malware; kernel-based attack; application attack; application hardening technique +
Footnote †: journal: _electronics_  
0000-0001-9991-555-2234-2334-2334-2334-2334-2334-2334-2334-234-2334-  
had over 2.9 million applications. AppBrain has classified almost 2.5 million of these apps as standard apps, while 0.4 million have been labeled as low-quality apps. Because of its global prominence, Android is a more appealing target for cybercriminals and is more vulnerable to malware and viruses. Malware is a combination of the terms \"malicious\" and \"software\". When software performs a common task without authority, it is referred to as malevolent software. An operation is a malicious operation that occurs without the user's knowledge or that is not planned to occur at that particular time. Malware is made up of two parts: Payload (carrier) and exploits (activity). Hackers can be classified as Rogue hackers with no prior experience and APT agents (Advanced Persistent Threat) who are highly trained and protected by safe-harbor countries and agencies. Attackers may belong to organizations, such as [PERSON], an American and former CIA operative, or may be outsiders. Hackers may have a wide range of intentions, and they may be grouped into black-hat hackers and white-hat hackers. Malware can be categorized as spyware, worms, logic bombs, viruses, rootkits, trojan horses, adverse, backdoors, ransomware [1], bots, and other types of malware. Following the release of the 'Pegasus' spyware for Android and iOS phones, a debate over \"National Security\" erupted. These viruses spread as a result of system vulnerabilities, insecure design, the frequent usage of portable devices, homogeneity, and several other factors. An expert hacker and a persistent attack adopt a strategy to stay alive for a long duration while remaining hidden from users. Figure 1 explains how sophisticated malware attackers follow an attack plan and exploitation. The first stage is **Reconnaissance and weaponization** in which the attackers find the weakness and vulnerability of the system. This may belong to the hardware side, namely the CPU, memory, communication device's antenna, and sim card, or the software side, namely zero-day vulnerabilities, continued use of old patches, and a weak encryption algorithm.