The folowing rules are specific only to the Android platform. They do not apply to the development of Java programs for other platforms and Android. (Those plus these DRD rules are here.) 

Risk Assessment Summary

ENV05-J. Do not deploy an application that can be remotely monitored      The CERT Oracle Secure Coding Standard for Java      MSC00-J. Use SSLSocket rather than Socket for secure data exchange