Reddit mentions of Android Security Internals: An In-Depth Guide to Android's Security Architecture

Although old, this book does a very good job explaining the Android architecture https://www.amazon.com/Embedded-Android-Porting-Extending-Customizing/dp/1449308295

Given it was written for Android 4, it doesn't have all the new Treble staff (the basis are still the same, so I think it's still worth reading), but the author has a set of slides that you can read after the book to get the recent changes: https://www.slideshare.net/opersys/presentations

​

Another useful book is https://www.amazon.com/Embedded-Programming-Android-Bringing-Scratch/dp/0134030001 . This one focuses more on getting AOSP running on a new device, and not that much in its internals or customization.

​

Two newer books I have recently found (although I haven't had time to read them) are https://www.amazon.com/Android-System-Programming-customizing-debugging/dp/178712536X (same author as the previous one, content mostly related to building the kernel and getting AOSP running in a new device/emulator) and https://www.amazon.com/Learning-Embedded-Android-N-Programming-ebook/dp/B01841W9AU

They are still pre-treble, but they are probably still useful.

​

Besides those, if you want something more related to internals and not so much on how to "get the source code and build AOSP", you could check https://www.amazon.com/Android-Security-Internals-Depth-Architecture/dp/1593275811 and https://www.amazon.com/Android-Hackers-Handbook-Joshua-Drake/dp/111860864X

Ah yes, idownloadblog, the most reliable source for anything, ever.

If you don't know about androids security structure, here is a good place to actually figure out how strong security is enforced: https://www.amazon.com/Android-Security-Internals-Depth-Architecture/dp/1593275811/ref=sr_1_1?ie=UTF8&qid=1512056071&sr=8-1&keywords=android+security+internals&pldnSite=1

Also, in link one you are suggesting that the plain amount of discovered vulnerabilities renders it the most insecure piece of software there is, while in "article" two you suggest it's the amount of malware targeting the platform. By this logic windows would be the most vulnerable desktop OS, but yet, somehow linux kernel shows way more vulnerabilities... strange.

Here is something to think about. With openly accessible source code vulnerabilities are discoverable way faster. This is the exact reason people prefer open source.

and something you might think about as well: The security of a system cannot be concluded by quantifying vulnerabilities.