Whitelisting of app

[Per_Henrik_Michaelse]

I see a similar question, nov 2022, but have still not found a way to do it.

I use android, and have apps installed for testing, developed by ourself. They are detected as malware, even one that just output “Hello”. When selecting ignore, the count of ignored rules go up, but the app is still classified as malware, which triggers related warnings, notifications, etc.

It would be a very useful, and simple, feature to be able to whitelist apps.

[bjm]

@Per_Henrik_Michaelse

I use android, and have apps installed for testing, developed by ourself. They are detected as malware, even one that just output “Hello”. When selecting ignore, the count of ignored rules go up, but the app is still classified as malware, which triggers related warnings, notifications, etc.
It would be a very useful, and simple, feature to be able to whitelist apps.

Hello @Per_Henrik_Michaelse
In Norton 360 for Android, there is a critical distinction between apps flagged as “Risky” and those flagged as “Malware”. While you can “Trust” risky apps to whitelist them, Norton does not allow users to whitelist apps it categorizes as Malware. Selecting “Ignore” only dismisses the current alert; it does not stop the app from being re-scanned and flagged as a threat in the background.

To resolve this for your self-developed testing apps, you must report them as false positives so Norton can update its global reputation database.

How to Report a False Positive
If you cannot bypass the malware alert through the “Trust” option, follow these steps to have the detection reviewed:

1. Report from the Alert: When the malware notification appears, tap Not Malware? if the option is visible.
2. Report via App Security:

• Open Norton 360 and go to Menu > App Security.
• Locate the app under the Malware Apps section and tap Report.
• Complete the Report False Positive form, providing a reason (e.g., “Internally developed testing app”).

3. Use the Submission Portal: For direct file review, visit the Norton Submission Portal.

• Select False Positive and upload a ZIP archive of your APK (max 500 MB).
• Include the Detection Name and Alert ID found at the bottom of the Norton alert popup.

Developer Recommendations
Since “Hello World” apps are being flagged, Norton’s heuristic engine likely distrusts the app due to its lack of a known developer certificate or common signature.

• Sign your APKs: Ensure your testing apps are signed with a consistent developer certificate rather than being unsigned.
• Submit Your Certificate: If you have a specific developer certificate, you can mention this in your False Positive report to help Norton recognize all apps from your “source”.

================================

• Learn more about App Advisor in Norton 360 for Android
• Respond to App Advisor detections in Norton 360 for Android
• Norton 360 Android app detects a known app as a ‘Privacy Risk’

================================

In Norton 360 for mobile devices, the process for whitelisting (or “trusting”) apps differs between Android and iOS due to how each operating system handles security permissions.
Android: Trusting Detected Apps
On Android, you can whitelist apps that Norton’s App Advisor flags as “Privacy Risks” or “Potentially Risky”.
Launch the Norton 360 app.
Tap Menu at the bottom of the main screen, then select App Security.
Under the Data Harvesting Apps or Potentially Risky Apps section, tap the specific app you want to whitelist.
Tap the Trust app option at the bottom of the screen.

• Note: You cannot trust apps that Norton categorizes as Malware apps.

-------------------
iOS (iPhone/iPad): Manual Exclusions
The iOS version of Norton 360 does not allow you to manually exclude or whitelist specific files or folders from scans through a settings menu.

• Handling Detections: If Norton flags an item on iOS, you must select Ignore at the time of detection.
• VPN Whitelisting (Split Tunneling): If you want an app to bypass the Norton Secure VPN (which can sometimes cause connectivity issues), you can use the Split Tunneling feature:
  In Norton 360, tap Menu > VPN.
  Tap the Settings (gear) icon > Split Tunneling.
  Toggle the feature On and check the box next to the app(s) you wish to exclude from the VPN.

-------------------

Web Protection Whitelisting
If Norton is blocking a specific website rather than an app, you can manage this via the Norton Support portal or by reporting a false positive directly in the app’s Safe Web settings.

==============================
Note: AI sourced content may make mistakes

[bjm]

@Per_Henrik_Michaelse

I use android, and have apps installed for testing, developed by ourself. They are detected as malware, even one that just output “Hello”. When selecting ignore, the count of ignored rules go up, but the app is still classified as malware, which triggers related warnings, notifications, etc.
It would be a very useful, and simple, feature to be able to whitelist apps.

In Norton 360 for Android, there is a critical distinction between apps flagged as “Risky” and those flagged as “Malware”. While you can “Trust” risky apps to whitelist them, Norton does not allow users to whitelist apps it categorizes as Malware. Selecting “Ignore” only dismisses the current alert; it does not stop the app from being re-scanned and flagged as a threat in the background.

To resolve this for your self-developed testing apps, you must report them as false positives so Norton can update its global reputation database.

Note: You cannot trust apps that Norton categorizes as Malware apps.

------------------

Respond to App Advisor detections for Malware apps ›
We recommend that you uninstall the apps that are listed under the Malware apps category. If you think that Norton has incorrectly detected an app as risky or suspicious and if you want to report it to us, follow the steps below:

1. If you have received a malware alert from Norton, in the alert message, tap Not Malware?.
   Then go to step 5.
2. If you have closed the malware alert then launch the Norton 360 app.
3. Tap Security and then tap App Security.
4. Under the Malware Apps section, tap report.
5. In the Report False Positive screen, under App or File, choose and select the app that you want to report to Norton.
6. In the description section, you must describe and provide a reason on why think that the detected app is not a malware.

https://support.norton.com/sp/en/us/home/current/solutions/v20230714120802209

====================

Use the Submission Portal: For direct file review, visit the Norton Submission Portal.

• Select False Positive and upload a ZIP archive of your APK (max 500 MB).
• Include the Detection Name and Alert ID found at the bottom of the Norton alert popup.

====================
Note: AI sourced content may make mistakes

[peterweb]

@Per_Henrik_Michaelse

I use android, and have apps installed for testing, developed by ourself.

So you are developing the apps and sideloading them onto your Android device? What AV products look for are a developer certificate as noted above. When you send your finished app to the Google Play Store they will require the necessary certificates so AV products will not flag the app.

[bjm]

Hello @Per_Henrik_Michaelse
Care to share your progress

[bjm]

Hello @Per_Henrik_Michaelse
Care to share your progress