SECURITY

Unravelling the mobile security conundrum

3/30/2012 9:11:29 AM

Unravelling the mobile security conundrum

Description: mobile security conundrum

What do you look for in a mobile phone? As well as the ability to make calls - and no-one really cares about that - the modern smartphone hosts a standard feature set: email, a web browser and multimedia capability.

Screen size, storage and connectivity may change depending on how much you want to spend. Then it’s a question of platform: some prefer Apple’s slick but locked-down environment, with its curated book of apps; others are more at home in Android’s rough-and-ready world. Windows is a must for a chunk of the population, and many mobile emailers remain addicted to BlackBerry.

What is less often considered by consumers is how secure a smartphone is. And yet, even more than a PC, your handset offers up the keys to your email, bank account and all manner of personal data. If you want to steal someone’s ID, you’ll need little more than their phone.

It’s a conundrum plenty of businesses face every day. How do you give your staff mobile access to email and productivity tools, without opening the door to hackers?

Ever wondered why so many enterprises run BlackBerry phones? It’s simple: RIM BlackBerry Enterprise Server software is a tool that allows the network administrator to remotely run a secure fleet of phones. If a BlackBerry is mislaid, it can be bricked and wiped by tech support. And updates can be rolled out fleetwide.

A CEO may think it’d be cool for all staff to have Phones, while the finance director thinks Android is a better idea - but the network admin is a BlackBerry fan with a soft spot for Windows. I guarantee it.

Trouble is, it’s a decision that’s almost immaterial. Give someone a locked down BlackBerry, and they’ll turn up at work with two phones: one for work, one for pleasure. Short of putting in metal detectors and relieving staffers of their gadgets at the door, you can’t stop people bringing in phones of all flavours - each one a potential Trojan horse, capable of bringing malware in and taking data out.

Mobile computing is a fact of life, and it’s not going away. Neither are the risks, nor try as you might you can’t remove them all. The only safe phone is one that’s never used. But the risks can be managed.

Whether used principally for business or pleasure, every mobile device should run security software. But unlike in the Windows world, the principle reason is not to fend off maiware. Indeed, research by AV-Test suggests Android antivirus doesn’t work (tinyurl.com/73tjd2n). The data gathered will help security vendors get a handle on the threat dynamic, but mobile antivirus is no panacea.

Much more important is the ability to remotely locate, lock and wipe your mobile device. The best mobile security solutions do exactly that. Norton Mobile Security, for instance, offers a web interface where you can find out where your phone is. Then, if it is in the hands of a crook, you can make it emit a loud scream, take a photo of the miscreant, track its location, wipe all the data and lock out prying eyes. Other tools offer similar functions. Use them, and you may lose your handset, but not your valuable data. And just as every Windows user should have antivirus, antispyware and a firewall, no mobile device should be left unprotected.

Other  
  •  Three rising cybercrime threats
  •  2012: the year of the mobile threat
  •  DrayTek Vigor 3200n
  •  What the cyberhackers do with your personal information
  •  Multifaceted Tests : Attempting Server-Side Includes (SSI) Injection Systematically, Attempting Log Injection Interactively & Attempting LDAP Injection Interactively
  •  Multifaceted Tests : Attempting XPath Injection Interactively & Attempting Server-Side Includes (SSI) Injection Interactively
  •  Multifaceted Tests : Attempting Command Injection Interactively & Attempting Command Injection Systematically
  •  Multifaceted Tests : Attempting PHP Include File Injection Interactively & Creating Decompression Bombs
  •  Programming .NET Components : Addressing Other Security Issues
  •  Programming .NET Components : Principal-Based Security
  •  Programming .NET Components : Visual Studio 2005 and Security
  •  Multifaceted Tests : Modifying Host Headers & Brute-Force Guessing Usernames and Passwords
  •  Multifaceted Tests : Bypassing Field Length Restrictions & Attempting Cross-Site Tracing Interactively
  •  Multifaceted Tests : Making HTTP Requests Using XSS & Attempting DOM-Based XSS Interactively
  •  Multifaceted Tests : Stealing Cookies Using XSS & Creating Overlays Using XSS
  •  IIS 7.0 : Securing Configuration - Controlling Configuration Delegation
  •  IIS 7.0 : Securing Configuration - Securing Sensitive Configuration
  •  IIS 7.0 : Securing Configuration - Restricting Access to Configuration
  •  Web Security Testing : Changing Sessions to Evade Restrictions & Impersonating Another User
  •  Web Security Testing : Manipulating Sessions - Analyzing Session Randomness with WebScarab
  •  
    Most View
    SQL Server 2008 : Explaining Advanced Query Techniques - Creating CTEs
    Toshiba Satellite Pro L770
    iPhone 3D Programming : Adding Depth and Realism - Surface Normals (part 1)
    HP Anti-glare Compaq LCD
    Lenovo ThinkPad Twist - The Old Form Factor Starting A New Life With Windows 8 (Part 2)
    Tech Preview 2013 (Part 1) - Next-Gen Gpus
    Coby Kyros MID9742 – Good Hardware But Poor Apps
    SmallForm Factor Cases (Part 1) - Akasa Crypto Vesa, Cooler Master Elite 120
    Syncing And Streaming (Part 1)
    Installing and Maintaining Devices in Vista: The Essentials
    Top 10
    ADO.NET Programming : Microsoft SQL Server (part 4) - Working with Typed Data Sets
    ADO.NET Programming : Microsoft SQL Server (part 3) - Using Stored Procedures with DataSet Objects
    ADO.NET Programming : Microsoft SQL Server (part 2) - Using SQL Server Stored Procedures
    ADO.NET Programming : Microsoft SQL Server (part 1) - Connecting to SQL Server, Creating Command Objects
    Windows Phone 8 In-Depth Review (Part 6)
    Windows Phone 8 In-Depth Review (Part 5)
    Windows Phone 8 In-Depth Review (Part 4)
    Windows Phone 8 In-Depth Review (Part 3)
    Windows Phone 8 In-Depth Review (Part 2)
    Windows Phone 8 In-Depth Review (Part 1)