October 30–31, 2016: Training
October 31–November 2, 2016: Tutorials & Conference
New York, NY

Securing 85% of the world’s smartphones: Notes from the field

Adrian Ludwig (Google)
1:15pm–1:55pm Tuesday, 11/01/2016
Security in context (security datasci)
Location: Rendezvous Trianon Level: Intermediate
Average rating: ****.
(4.67, 6 ratings)

Prerequisite knowledge

  • A general background in or knowledge of defending an organization

What you'll learn

  • Understand the converging factors to consider when making a security plan
  • Explore the incident response process Google follows and learn how you can adapt it in your organization
  • Learn the importance of data and how it can be used more effectively for defense
  • Discover key takeaways from what Google has learned from previous attacks on the Android ecosystem
  • Learn how defense teams can think more offensively to outsmart attackers


The Android ecosystem has more than one billion active devices from hundreds of OEMs and carrier networks around the world—representing 85% of smartphones in the market. This means that the team charged with securing it has a unique set of assets—and liabilities. On the one hand, if a given attack has a good chance of happening, it’s likely happening a few times a day in a network this size. On the other hand, the team is uniquely positioned to analyze and better understand such a large part of the mobile Web that they can anticipate and sometimes prevent new threats.

Adrian Ludwig, lead engineer for Android security at Google, is in charge of securing the Android devices and network worldwide. Adrian explains the converging factors he evaluates when implementing a security strategy of this scale and shares how he thinks about the problem. Adrian then offers real-life case studies, practical lessons, and information that you can apply to your own organizations—all of which will make you think differently about mobile security.

Photo of Adrian Ludwig

Adrian Ludwig


Adrian Ludwig is the lead engineer for Android security at Google, where he is responsible for the security of the Android platform and Google’s applications and services for Android. Prior to joining Google, Adrian held technical leadership positions at Joyent, Adobe, Macromedia, @stake, and the Department of Defense. He holds a BA in mathematics from Williams College and an MBA from the University of California, Berkeley.