Help! My Mobile Device is Spying on Me
|
|
|
- Richard Warren
- 7 years ago
- Views:
Transcription
1 Help! My Mobile Device is Spying on Me Delivered by Murray Goldschmidt, Chief Operating Officer AusCERT 2012 Conference, 17 May 2012 Compliance, Protection & Business Confidence Sense of Security Pty Ltd Sydney Level 8, 66 King Street Sydney NSW 2000 Australia Melbourne Level 10, 401 Docklands Drv Docklands VIC 3008 Australia T: T: +61 (0) F: +61 (0) info@senseofsecurity.com.au ABN: Sense of Security 2012 Page 1 May 2012
2 Agenda Our Targeted Voice Recorder research addresses Relevance - Extent of exposure Simplicity - Anatomy of the attack Protection - Mitigating controls Sense of Security 2012 Page 2 May 2012
3 High Level Process Flow Phase 0 Target Sense of Security 2012 Page 3 May 2012
4 High Level Process Flow Phase 0 Target Phase 1 Identification Physical ID Remote ID Sense of Security 2012 Page 4 May 2012
5 High Level Process Flow Phase 0 Target Phase 1 Identification Physical ID Remote ID Phase 2 Acquisition App App Sense of Security 2012 Page 5 May 2012
6 High Level Process Flow Phase 0 Target Phase 1 Identification Physical ID Remote ID Phase 2 Acquisition App App Phase 3 Exploit Sense of Security 2012 Page 6 May 2012
7 Mobile Device Platforms Sense of Security 2012 Page 7 May 2012
8 Mobile Device Platforms Sense of Security 2012 Page 8 May 2012
9 Mobile Device Platforms Sense of Security 2012 Page 9 May 2012
10 Mobile Device Platforms Sense of Security 2012 Page 10 May 2012
11 Mobile Device Platforms Sense of Security 2012 Page 11 May 2012
12 Android - Path of Least Resistance Volume of devices and growth Market fragmentation Lag for software updates Open platform Vetting controls Sense of Security 2012 Page 12 May 2012
13 Proof of Concept - Overview Requires: Objective: Obtain a voice recording of the user using the device (not phone call) Knowledge of their mobile device platform Physical or remote acquisition techniques A mobile app that can trigger at a specific location, act as a recorder and post recorded files An app that is in the market place (ideally) An app that can be remote controlled (ideally) Sense of Security 2012 Page 13 May 2012
14 Simple but Efficient Sense of Security 2012 Page 14 May 2012
15 Simple but Effective (Devastating) Voice recorder - > Targeted Individual ~600 LOC Corporate Espionage Insider Trading Financial Gain Political Gain Competitive Advantage ~$few hundred Sense of Security 2012 Page 15 May 2012
16 Proof of Concept - Application Functions ~600 Lines of Code Polls a specific server for instructions (where to trigger, radius, duration) Triggers on GPS co-ordinates (or derived location from GSM Network, Wireless etc) Records for 30 seconds. Continuous looping for demo. Permissions Required access your location (GPS) your personal information (contact info) network communications (make outbound connections) storage (store file) hardware controls (record audio) Visibility None will operate in the background and not alert the owner it is triggered (although PoC app presents logging information on the screen for demo purposes, and vibrates to indicate recording!) Sense of Security 2012 Page 16 May 2012
17 Write App for Purpose Triggered Voice Recorder Sense of Security 2012 Page 17 May 2012
18 Write App for Purpose Triggered Voice Recorder Sense of Security 2012 Page 18 May 2012
19 Write App for Purpose Triggered Voice Recorder Sense of Security 2012 Page 19 May 2012
20 Write App for Purpose Triggered Voice Recorder Sense of Security 2012 Page 20 May 2012
21 Write App for Purpose Triggered Voice Recorder Sense of Security 2012 Page 21 May 2012
22 Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Sense of Security 2012 Page 22 May 2012
23 Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Sense of Security 2012 Page 23 May 2012
24 Demo Application Notepad Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Sense of Security 2012 Page 24 May 2012
25 Demo Application Notepad Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Sense of Security 2012 Page 25 May 2012
26 Demo Application Notepad Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Sense of Security 2012 Page 26 May 2012
27 Demo Application Notepad Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Sense of Security 2012 Page 27 May 2012
28 Demo Application Notepad Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Sense of Security 2012 Page 28 May 2012
29 Demo Application Notepad Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Sense of Security 2012 Page 29 May 2012
30 Demo Application Notepad Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Sense of Security 2012 Page 30 May 2012
31 Demo Application Notepad Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Sense of Security 2012 Page 31 May 2012
32 Demo Application Notepad Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Sense of Security 2012 Page 32 May 2012
33 Demo Application Notepad Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Sense of Security 2012 Page 33 May 2012
34 Demo Application Notepad Demo APP Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Sense of Security 2012 Page 34 May 2012
35 Demo Application Notepad Demo APP Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Application Re-Vetted(?) & Published Sense of Security 2012 Page 35 May 2012
36 Demo Application Notepad Demo APP Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Application Re-Vetted(?) & Published Sense of Security 2012 Page 36 May 2012
37 Demo Application Notepad Demo APP Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Application Re-Vetted(?) & Published Sense of Security 2012 Page 37 May 2012
38 Demo Application Notepad Demo APP Demo APP Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Application Re-Vetted(?) & Published Sense of Security 2012 Page 38 May 2012
39 Demo Application Notepad Demo APP Demo APP Demo APP Write App for Purpose Triggered Voice Recorder Select & Publish Demo App (e.g. Notepad) to Market (e.g. Google play) Inject Triggered Voice Recording App into Published App Application Re-Vetted(?) & Published Sense of Security 2012 Page 39 May 2012
40 Seek Target Sense of Security 2012 Page 40 May 2012
41 Seek Target Sense of Security 2012 Page 41 May 2012
42 Seek Target Sense of Security 2012 Page 42 May 2012
43 Seek Target Sense of Security 2012 Page 43 May 2012
44 Seek Target Sense of Security 2012 Page 44 May 2012
45 Seek Target Download & Install App (Thru Remote or Physical Acquisition) Sense of Security 2012 Page 45 May 2012
46 Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Sense of Security 2012 Page 46 May 2012
47 Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Sense of Security 2012 Page 47 May 2012
48 Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Sense of Security 2012 Page 48 May 2012
49 Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server Sense of Security 2012 Page 49 May 2012
50 Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server Sense of Security 2012 Page 50 May 2012
51 N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server Sense of Security 2012 Page 51 May 2012
52 N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server Sense of Security 2012 Page 52 May 2012
53 N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server Sense of Security 2012 Page 53 May 2012
54 N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server Sense of Security 2012 Page 54 May 2012
55 N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server App Polls Attacker s Server & Downloads GPS Co-ord s Sense of Security 2012 Page 55 May 2012
56 Demo APP N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server App Polls Attacker s Server & Downloads GPS Co-ord s Sense of Security 2012 Page 56 May 2012
57 Demo APP N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server App Polls Attacker s Server & Downloads GPS Co-ord s Sense of Security 2012 Page 57 May 2012
58 Demo APP N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server App Polls Attacker s Server & Downloads GPS Co-ord s Sense of Security 2012 Page 58 May 2012
59 Demo APP N W Demo APP N W Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server App Polls Attacker s Server & Downloads GPS Co-ord s Sense of Security 2012 Page 59 May 2012
60 Demo APP N W N W Demo APP Seek Target Download & Install App (Thru Remote or Physical Acquisition) Set the GPS Co-ordinates for Desired Recording Location on server App Polls Attacker s Server & Downloads GPS Co-ord s Sense of Security 2012 Page 60 May 2012
61 Recording Device Activated at Prescribed Location Sense of Security 2012 Page 61 May 2012
62 Recording Device Activated at Prescribed Location Sense of Security 2012 Page 62 May 2012
63 N W or SSID Recording Device Activated at Prescribed Location Sense of Security 2012 Page 63 May 2012
64 N W or SSID Recording Device Activated at Prescribed Location Sense of Security 2012 Page 64 May 2012
65 N W or SSID Recording Device Activated at Prescribed Location Sense of Security 2012 Page 65 May 2012
66 N W or SSID Recording Device Activated at Prescribed Location Recording Sense of Security 2012 Page 66 May 2012
67 Demo APP N W or SSID Recording Device Activated at Prescribed Location Recording Sense of Security 2012 Page 67 May 2012
68 Demo APP N W or SSID Recording Device Activated at Prescribed Location Recording Sense of Security 2012 Page 68 May 2012
69 Demo APP N W or SSID Recording Device Activated at Prescribed Location Recording Sense of Security 2012 Page 69 May 2012
70 Demo APP N W or SSID Recording Device Activated at Prescribed Location Recording Recording File sent to Attacker s Server Sense of Security 2012 Page 70 May 2012
71 Demo APP N W or SSID Recording Device Activated at Prescribed Location Recording Recording File sent to Attacker s Server Sense of Security 2012 Page 71 May 2012
72 Demo APP N W or SSID Recording Device Activated at Prescribed Location Recording Recording File sent to Attacker s Server Sense of Security 2012 Page 72 May 2012
73 Demo APP N W or SSID Recording Device Activated at Prescribed Location Recording Recording File sent to Attacker s Server Sense of Security 2012 Page 73 May 2012
74 Demo Sense of Security 2012 Page 74 May 2012
75 Physical Identification Elevator Sense of Security 2012 Page 75 May 2012
76 Physical Identification Lobby Elevator Sense of Security 2012 Page 76 May 2012
77 Physical Identification Lobby Elevator Exec Desk Sense of Security 2012 Page 77 May 2012
78 Physical Identification Lobby Elevator Exec Desk Coffee Shop Sense of Security 2012 Page 78 May 2012
79 Physical Identification Lobby Elevator Exec Desk Coffee Shop Sense of Security 2012 Page 79 May 2012
80 Physical Acquisition Sense of Security 2012 Page 80 May 2012
81 Physical Acquisition No Password No pin/password controls by default; Not complex by default Sense of Security 2012 Page 81 May 2012
82 Physical Acquisition No Password No pin/password controls by default; Not complex by default Password Guessing Common password combinations; Common patterns Sense of Security 2012 Page 82 May 2012
83 Physical Acquisition No Password No pin/password controls by default; Not complex by default Password Guessing Common password combinations; Common patterns Smudge Attack Sense of Security 2012 Page 83 May 2012
84 Physical Acquisition No Password No pin/password controls by default; Not complex by default Password Guessing Common password combinations; Common patterns Smudge Attack Face Recognition Sense of Security 2012 Page 84 May 2012
85 Physical Acquisition No Password No pin/password controls by default; Not complex by default Password Guessing Common password combinations; Common patterns Smudge Attack Face Recognition Sense of Security 2012 Page 85 May 2012
86 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network Sense of Security 2012 Page 86 May 2012
87 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Sense of Security 2012 Page 87 May 2012
88 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Gmail Compromise Sense of Security 2012 Page 88 May 2012
89 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Gmail Compromise Sense of Security 2012 Page 89 May 2012
90 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Gmail Compromise Sense of Security 2012 Page 90 May 2012
91 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Gmail Compromise Drive by Download Sense of Security 2012 Page 91 May 2012
92 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Gmail Compromise Drive by Download Sense of Security 2012 Page 92 May 2012
93 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Gmail Compromise Drive by Download Sense of Security 2012 Page 93 May 2012
94 Remote Identification & Acquisition Trailer Sent from my HTC Velocity 4G on the Next G network User Agent Info Gmail Compromise Drive by Download Spear Phishing Sense of Security 2012 Page 94 May 2012
95 Broader Implications Access to Personal or Corporate Access to SMS Access to Images Access to Network (personal, wireless, corporate, VPN) Access to Corporate Apps & Data Send SMS to Premium Rated Services Toll Fraud Sense of Security 2012 Page 95 May 2012
96 Controls and Mitigations Controls that will assist in addressing this issue APP APP Whitelist specific applications (or blacklist 2 nd pref) Educate users on best practices regarding mobile devices Strong alphanumeric passcode; smudge protection Restrict default apps and resources such as browser, camera, YouTube, and Google Play Sense of Security 2012 Page 96 May 2012
97 Controls and Mitigations Other MDM controls that should be considered but won t all address this issue Bring corporate and employee-owned phones under centralised IT management Connect mobile devices securely to enterprise resources including , Wi-Fi and VPN Enforce security policies to protect corporate data Configure device security such as encryption of dataat-rest and passcodes Enforce secure bring your own device (BYOD) policies if you allow staff to use their devices inside the network Sense of Security 2012 Page 97 May 2012
98 Controls and Mitigations Keep highly confidential data off mobile devices No removable media such as SD cards allowed in corporate mobile devices Block attachment execution or downloading to the SD card Detect rooted devices and remote wipe when found Internal segregation controls on what access mobile devices have inside the network Sense of Security 2012 Page 98 May 2012
99 Controls and Mitigations Expedite handling of secure lost, stolen or retired smartphones through full and selective wipe Rogue app protection as well as inventories of installed apps Ensure anti malware/anti virus is up to date Define and enforce allowed device types, OS, and patch levels Sense of Security 2012 Page 99 May 2012
100 Mobile Device Platforms These attacks are valid across the other major platforms. Sense of Security 2012 Page 100 May 2012
101 SOS Research Special note of thanks to the dedicated, motivated and highly talented team at SOS. This presentation is the culmination of a research program delivered through effective collaboration, teamwork and perseverance to push the envelope on the cutting edge. Sense of Security 2012 Page 101 May 2012
102 Conclusion Extreme exposure Severe implications for privacy of the individual Severe implications for confidentiality of information for business/government The fact that every person has/will have a mobile device means that every person is a walking/moving/sitting voice/video recorder that can be exploited Remote control capability to spy extends the scope and risk MDM controls are good for general security but not all will address this issue Requires user education; however curiosity of users and inclination to trust will result in continued exposure Sense of Security 2012 Page 102 May 2012
103 Questions? Sense of Security 2012 Page 103 May 2012
104 Thank you Recognised as Australia s fastest growing information security and risk management consulting firm through the Deloitte Technology Fast 50 & BRW Fast 100 programs Owner of trademark and all copyright is Sense of Security Pty Ltd. Neither text or images can be reproduced without written permission. This presentation will be published at Whitepaper will be published at Attribution icons from iconfinder.com Sydney, Melbourne T: info@senseofsecurity.com.au Sense of Security 2012 Page 104 May 2012
Viproy Reloaded 2.0. Compliance, Protection & Business Confidence. Melbourne Level 10, 401 Docklands Drv
Viproy Reloaded 2.0 Compliance, Protection & Business Confidence Sense of Security Pty Ltd Sydney Level 8, 66 King Street Melbourne Level 10, 401 Docklands Drv T: 1300 922 923 T: +61 (0) 2 9290 4444 info@senseofsecurity.com.au
Penetration Testing. How Government Can Achieve Better Outcomes. Delivered by Murray Goldschmidt, Chief Operating Officer
Penetration Testing How Government Can Achieve Better Outcomes Delivered by Murray Goldschmidt, Chief Operating Officer Cyber Security for Government Conference, 25&26 October 2011, Sydney Compliance,
SysAid MDM User Guide for Android
SysAid MDM User Guide for Android Table of Contents Introduction Enrolling Your Android Mobile Device in SysAid MDM Unenrolling Your Android Mobile Device from SysAid MDM Have Any Questions? Introduction
Yes MAM: How Mobile Device Management Plus Mobile Application Management Protects and Addresses BYOD
STRATEGY ANALYTICS INSIGHT October 2012 Yes MAM: How Mobile Device Management Plus Mobile Application Management Protects and Addresses BYOD By Mark Levitt, Analyst/Director at Strategy Analytics BYOD
What Is BYOD? Challenges and Opportunities
Wor k s pac es Mobi l i t ysol ut i ons Bl uewi r esol ut i ons www. bl uewi r e. c o. uk What Is BYOD? Challenges and Opportunities What is BYOD How Secure is Your BYOD Environment? Bring your own device
Feature List for Kaspersky Security for Mobile
Feature List for Kaspersky Security for Mobile Contents Overview... 2 Simplified Centralized Deployment... 2 Mobile Anti-Malware... 3 Anti-Theft / Content Security... Error! Bookmark not defined. Compliance
SAS Mobile BI Security and the Mobile Device
SAS Mobile BI Security and the Mobile Device Version 1.0 April 24, 2015 Contents Introduction...1 Security Features Provided by SAS Mobile BI and SAS Visual Analytics...2 Introduction... 2 Lock the SAS
Separation of Corporate and Personal: Best Practices for Securing Data on Employee-owned Devices
Separation of Corporate and Personal: Best Practices for Securing Data on Employee-owned Devices Val Hetrick, Director, Customer Success Neil Florio, VP Marketing 1 Agenda BYOD Trends End User Perception
Cortado Corporate Server
Cortado Corporate Server 100 % On Premise Installed & Run Entirely On Your Corporate Network Feature Mobile Device Device Policy Application E-mail Push Wi-Fi Configuration Push Enable secure BYOD and
Managing Mobility. 10 top tips for Enterprise Mobility Management
Managing Mobility 10 top tips for Enterprise Mobility Management About Trinsic Trinsic is a new kind of business communications specialist, built from the ground up to help your organisation leave behind
perspective The battle between MDM and MAM: Where MAM fills the gap? Abstract - Payal Patel, Jagdish Vasishtha (Jags)
perspective The battle between MDM and MAM: Where MAM fills the gap? - Payal Patel, Jagdish Vasishtha (Jags) Abstract MDM Mobile Device Management and MAM Mobile Application Management are main Enterprise
Embracing BYOD. Without Compromising Security or Compliance. Sheldon Hebert SVP Enterprise Accounts, Fixmo. Sheldon.Hebert@fixmo.
Embracing BYOD Without Compromising Security or Compliance The Mobile Risk Management Company Sheldon Hebert SVP Enterprise Accounts, Fixmo Sheldon.Hebert@fixmo.com New Realities of Enterprise Mobility
McAfee Enterprise Mobility Management
Technical FAQ McAfee Enterprise Mobility Management Frequently Asked Questions Device Management Q: Which devices do you currently support? A: McAfee Enterprise Mobility Management (McAfee EMM ) offers
Mobile Device Management (MDM) Policies. Best Practices Guide. www.maas360.com
Mobile Device Management (MDM) Policies Best Practices Guide www.maas360.com Copyright 2014 Fiberlink Communications Corporation. All rights reserved. This document contains proprietary and confidential
BYOD in the Enterprise
BYOD in the Enterprise MDM. The solution to BYOD? Context Information Security whitepapers@contextis.co.uk October 2013 Context Information Security 30 Marsh Wall, London, E14 9TP +44 (0) 207 537 7515
Android App Release Notes
www.novell.com/documentation Android App Release Notes ZENworks Mobile Management 2.7.x August 2013 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or use
GadgetTrak Mobile Security Android & BlackBerry Installation & Operation Manual
GadgetTrak Mobile Security Android & BlackBerry Installation & Operation Manual Overview GadgetTrak Mobile Security is an advanced software application designed to assist in the recovery of your mobile
Mobile Device Management (MDM) Policies
Mobile Device Management (MDM) Policies Best Practices Guide Copyright 2012 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice.
Hands on, field experiences with BYOD. BYOD Seminar
Hands on, field experiences with BYOD. BYOD Seminar Brussel, 25 september 2012 Agenda Challenges RIsks Strategy Before We Begin Thom Schiltmans Deloitte Risk Services Security & Privacy Amstelveen tschiltmans@deloitte.nl
Auditing the Security and Management of Smart Devices. ISACA Dallas Meeting February 13, 2014
Securely Manage your devices, applications and data. Deploy your corporate policies on smart devices. Comply with Regulatory Laws. Auditing the Security and Management of Smart Devices ISACA Dallas Meeting
A guide to enterprise mobile device management.
WHITEPAPER A guide to enterprise Beyond expectation. www.azzurricommunications.co.uk Introduction. As smartphones and tablets proliferate in the enterprise, IT leaders are under pressure to implement an
Xperia TM. Read about how Xperia TM devices can be administered in a corporate IT environment
Xperia TM in Business Mobile Device Management Read about how Xperia TM devices can be administered in a corporate IT environment Device management clients Xperia TM T3 Exchange ActiveSync The my Xperia
IT Resource Management & Mobile Data Protection vs. User Empowerment
Enterprise Mobility Management Buyers Guide IT Resource Management & Mobile Data Protection vs. User Empowerment Business leaders and users are embracing mobility and enjoying the flexibility and productivity
Security and Compliance challenges in Mobile environment
Security and Compliance challenges in Mobile environment Emerging Technologies November 19, 2013 Bob Bastani Introductions Bob Bastani, Security & Compliance Program Manager, IBM, 301-803-6078, bbastani@us.ibm.com
LabTech Mobile Device Management Overview
You are here: Using LabTech > Mobile Device Management > Mobile Device Management Overview LabTech Mobile Device Management Overview Features LabTech mobile device management (MDM) is a fully integrated
GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown
GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android with TouchDown 1 Table
IT Resource Management vs. User Empowerment
Mobile Device Management Buyers Guide IT Resource Management vs. User Empowerment Business leaders and users are embracing mobility and enjoying the flexibility and productivity leading to rising mobile
Managing Mobility in the BYOD Era:
Managing Mobility in the BYOD Era: New technology requires new thinking Clint Adams Director of Mobile Technology Services cadams@fiberlink.com BYOD is Accelerating 350 million employee-owned devices in
Symantec Mobile Management 7.2
Scalable, secure, and integrated device management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any previous technology
Mobile Device Management Version 8. Last updated: 16-09-14
Mobile Device Management Version 8 Last updated: 16-09-14 Copyright 2013, 2X Ltd. http://www.2x.com E-mail: info@2x.com Information in this document is subject to change without notice. Companies names
How To Manage A Mobile Device Management (Mdm) Solution
Mobile Device Management Buyers Guide IT departments should be perceived as the lubricant in the machine that powers an organization. BYOD is a great opportunity to make life easier for your users. But
How To Use A Microsoft Mobile Security Software For A Corporate Account On A Mobile Device
Technical FAQ McAfee Enterprise Mobility Management (McAfee EMM ) 12.0 Frequently Asked Questions Q. What types of mobile devices does McAfee Enterprise Mobility Management (McAfee EMM ) support? A. McAfee
Junos Pulse for Google Android
Junos Pulse for Google Android User Guide Release 4.0 October 2012 R1 Copyright 2012, Juniper Networks, Inc. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks
Cisco Mobile Collaboration Management Service
Cisco Mobile Collaboration Management Service Cisco Collaboration Services Business is increasingly taking place on both personal and company-provided smartphones and tablets. As a result, IT leaders are
Mobile & Security? Brice Mees Security Services Operations Manager
Mobile & Security? Brice Mees Security Services Operations Manager Telenet for Business Agenda Mobile Trends Where to start? Risks and Threats Risk mitigation Conclusion Agenda Mobile Trends Where to start?
Security in the Cloud
Security in the Cloud Visibility & Control of your Cloud Service Provider Murray Goldschmidt, Pierre Tagle, Ph.D. April 2012 Compliance, Protection & Business Confidence Sense of Security Pty Ltd Sydney
ONE Mail Direct for Mobile Devices
ONE Mail Direct for Mobile Devices User Guide Version: 2.0 Document ID: 3292 Document Owner: ONE Mail Product Team Copyright Notice Copyright 2014, ehealth Ontario All rights reserved No part of this document
Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com
Manual Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com Information in this document is subject to change without notice. Companies names and data used in examples herein are fictitious
Symantec Mobile Management 7.2
Scalable, secure, and integrated device management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any previous technology
How To Protect The Agency From Hackers On A Cell Phone Or Tablet Device
PRODUCT DESCRIPTION Product Number: 0.0.0 MOBILE DEVICE MANAGEMENT (MDM) Effective Date: Month 00, 0000 Revision Date: Month 00, 0000 Version: 0.0.0 Product Owner: Product Owner s Name Product Manager:
BYOD Guidance: BlackBerry Secure Work Space
GOV.UK Guidance BYOD Guidance: BlackBerry Secure Work Space Published 17 February 2015 Contents 1. About this guidance 2. Summary of key risks 3. Secure Work Space components 4. Technical assessment 5.
Insert Partner logo here. Financial Mobility Balancing Security and Success
Financial Mobility Balancing Security and Success Copyright 2012 Fiberlink Communications Corporation. All rights reserved. This document contains proprietary and confidential information of Fiberlink.
SYNCSHIELD FEATURES. Preset a certain task to be executed. specific time.
SYNCSHIELD FEATURES This document describes the diversity of SyncShield features. Please note that many of the features require a certain platform version, often earlier software versions do not support
IBM Endpoint Manager for Mobile Devices
IBM Endpoint Manager for Mobile Devices A unified platform for managing mobile devices together with your traditional endpoints Highlights Address business and technology issues of security, complexity
Samsung SDS. Enterprise Mobility Management
Samsung SDS Enterprise Mobility Samsung SDS Enterprise Mobility Faster and Safer Samsung SDS Enterprise Mobility provides stronger security for enterprise mobility without Compromising usability of mobile
Guideline on Safe BYOD Management
CMSGu2014-01 Mauritian Computer Emergency Response Team CERT-MU SECURITY GUIDELINE 2011-02 Enhancing Cyber Security in Mauritius Guideline on Safe BYOD Management National Computer Board Mauritius Version
What We Do: Simplify Enterprise Mobility
What We Do: Simplify Enterprise Mobility AirWatch by VMware is the global leader in enterprise-grade mobility solutions across every device, every operating system and every mobile deployment. Our scalable
Security Guide. BlackBerry Enterprise Service 12. for ios, Android, and Windows Phone. Version 12.0
Security Guide BlackBerry Enterprise Service 12 for ios, Android, and Windows Phone Version 12.0 Published: 2015-02-06 SWD-20150206130210406 Contents About this guide... 6 What is BES12?... 7 Key features
Workplace-as-a-Service BYOD Management
For companies with people in them Workplace-as-a-Service BYOD Management Solution Overview The BYOD Management solution provides customers with IT tools and services to deploy a Workplace-as-a-Service
BlackBerry Universal Device Service. Demo Access. AUTHOR: System4u
Demo Access AUTHOR: System4u BlackBerry Universal Device Service Revisions Date Version Description Author June 26 th 2012 1.0 Roman Přikryl September 25 th 2012 1.5 Revision Roman Přikryl October 5 th
COMMONWEALTH OF PENNSYLVANIA DEPARTMENT S OF PUBLIC WELFARE, INSURANCE AND AGING
COMMONWEALTH OF PENNSYLVANIA DEPARTMENT S OF PUBLIC WELFARE, INSURANCE AND AGING INFORMATION TECHNOLOGY STANDARD Name Of Standard: Mobile Device Standard Domain: Security Date Issued: 09/07/2012 Date Revised:
Security Awareness For Server Administrators. State of Illinois Central Management Services Security and Compliance Solutions
Security Awareness For Server Administrators State of Illinois Central Management Services Security and Compliance Solutions Purpose and Scope To present a best practice approach to securing your servers
Connect With My Team. in real time RELIABLEFAST FAST M SPEED TEAMCONNECT SURF. Know How Guide to Mobile Device Management PEACE OF MIND SPEED NEW
Connect With My Team in real time Know How Guide to Mobile Device Management READY CONNECT accessreliableshare M ON SECURE SMAR T IND TOOLSNEXT SOLUTION READY Know How Guide to Mobile Device Management...
Advanced Configuration Steps
Advanced Configuration Steps After you have downloaded a trial, you can perform the following from the Setup menu in the MaaS360 portal: Configure additional services Configure device enrollment settings
Embracing Complete BYOD Security with MDM and NAC
Embracing Complete BYOD Security with MDM and NAC Clint Adams, CISSP, Director, Mobility Solutions Keith Glynn, CISSP, Sr. Technical Solutions Engineer August 22, 2013 Today s Speakers Clint Adams, CISSP
Sophos Mobile Control Startup guide. Product version: 3
Sophos Mobile Control Startup guide Product version: 3 Document date: January 2013 Contents 1 About this guide...3 2 What are the key steps?...5 3 Log in as a super administrator...6 4 Activate Sophos
MDM: Enabling Productivity in the world of mobility. Sudhakar S Peddibhotla Director of Engineering, Good Technology
MDM: Enabling Productivity in the world of mobility Sudhakar S Peddibhotla Director of Engineering, Good Technology Disclaimer None of the content in this presentation can be consider Good Technology s
Mobile Device as a Platform for Assured Identity for the Federal Workforce
Mobile Device as a Platform for Assured Identity for the Federal Workforce Dr. Sarbari Gupta President and CEO, Electrosoft U.S. Army Information Technology Agency (ITA) Security Forum Fort Belvoir Electrosoft
1. What are the System Requirements for using the MaaS360 for Exchange ActiveSync solution?
MaaS360 FAQs This guide is meant to help answer some of the initial frequently asked questions businesses ask as they try to figure out the who, what, when, why and how of managing their smartphone devices,
Sophos Mobile Control User guide for Android
Sophos Mobile Control User guide for Android Product version: 2.5 Document date: July 2012 Contents 1 About Sophos Mobile Control... 3 2 Login to the Self Service Portal... 4 3 Set up Sophos Mobile Control
Symantec Mobile Management 7.1
Scalable, secure, and integrated device management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any previous technology,
A Guide to MAM and Planning for BYOD Security in the Enterprise
A Guide to MAM and Planning for BYOD Bring your own device (BYOD) can pose a couple different challenges, not only the issue of dealing with security threats, but also how to handle mobile applications.
Secure Your Mobile Workplace
Secure Your Mobile Workplace Sunny Leung Senior System Engineer Symantec 3th Dec, 2013 1 Agenda 1. The Threats 2. The Protection 3. Q&A 2 The Mobile Workplaces The Threats 4 Targeted Attacks up 42% in
Securing Office 365 with MobileIron
Securing Office 365 with MobileIron Introduction Office 365 is Microsoft s cloud-based productivity suite. It includes online versions of Microsoft s most popular solutions, like Exchange and SharePoint,
6 Things To Think About Before Implementing BYOD
6 Things To Think About Before Implementing BYOD Kimber Spradlin, CISA, CISSP 2012 IBM Corporation Mobile Devices: Unique Management & Security Challenges Mobile devices are shared more often Mobile devices
Mobile Device Management Solution Hexnode MDM
Mobile Device Management Solution Hexnode MDM Frequently Asked Questions www.hexnode.com Frequently Asked Questions How is Hexnode MDM license calculated?...4 Which ports do I need to open for Hexnode
Symantec Mobile Management 7.1
Scalable, secure, and integrated device management for healthcare Data Sheet: Industry Perspectives Healthcare Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any
Best Practices for a BYOD World
Face Today s Threats Head-On: Best Practices for a BYOD World Chris Vernon CISSP, VTSP Security Specialist Agenda Mobile Threats Overview 2013 State of Mobility Survey Canada BYOD Best Practices 2 Mobile
Codeproof Mobile Security & SaaS MDM Platform
Codeproof Mobile Security & SaaS MDM Platform info@codeproof.com https://codeproof.com Mobile devices have been transformed into multi-faceted, multi-tasking, multimedia tools for personal expression,
AirWatch for ios Devices
Overview What is AirWatch AirWatch is the mobile device management (MDM) system provided by UMHS to ensure security for smart phones and tablets that connect to the UMHS environment. AirWatch provides
Athena Mobile Device Management from Symantec
Athena Mobile Device Management from Symantec Scalable, Secure, and Integrated Device Management for ios and Android Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile
Product Manual. Mobile Device Managment Version 8.1. Last Updated: 06/07/15
Product Manual Mobile Device Managment Version 8.1 Last Updated: 06/07/15 Parallels IP Holdings GmbH Vordergasse 59 8200 Schaffhausen Switzerland Tel: + 41 52 632 0411 Fax: + 41 52 672 2010 www.parallels.com
BUSINESS PROTECTION. PERSONAL PRIVACY. ONE DEVICE.
BUSINESS PROTECTION. PERSONAL PRIVACY. ONE DEVICE. Enhanced Security for Your Network and Business Intelligence. Work Hard. Rest Easy. Today, employees are always on, which for you means always vulnerable.
TCS Hy5 Presidio Your Mobile Environment, Your Way Configure, Secure, Deploy. Mobility Solutions
TCS Hy5 Presidio Your Mobile Environment, Your Way Configure, Secure, Deploy Mobility Solutions The growth of in-house and third-party enterprise mobile applications; device diversity across ios, Android,
The ForeScout Difference
The ForeScout Difference Mobile Device Management (MDM) can help IT security managers secure mobile and the sensitive corporate data that is frequently stored on such. However, ForeScout delivers a complete
Chris Boykin VP of Professional Services
5/30/12 Chris Boykin VP of Professional Services Future Com! 20 years! Trusted Advisors! Best of brand partners! Brand name customers! 1000 s of solutions delivered!! 1 5/30/12 insight to the future, bringing
Sophos Mobile Control Technical guide
Sophos Mobile Control Technical guide Product version: 2 Document date: December 2011 Contents 1. About Sophos Mobile Control... 3 2. Integration... 4 3. Architecture... 6 4. Workflow... 12 5. Directory
Symantec Mobile Management for Configuration Manager 7.2
Symantec Mobile Management for Configuration Manager 7.2 Scalable, Secure, and Integrated Device Management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices
Running Head: AWARENESS OF BYOD SECURITY CONCERNS 1. Awareness of BYOD Security Concerns. Benjamin Tillett-Wakeley. East Carolina University
Running Head: AWARENESS OF BYOD SECURITY CONCERNS 1 Awareness of BYOD Security Concerns Benjamin Tillett-Wakeley East Carolina University AWARENESS OF BYOD SECURITY CONCERNS 2 Abstract This paper will
Android support for Microsoft Exchange in pure Google devices
Android support for Microsoft Exchange in pure Google devices Note: The information presented here is intended for Microsoft Exchange administrators who are planning and implementing support for any of
1. Introduction... 1. 2. Activation of Mobile Device Management... 3. 3. How Endpoint Protector MDM Works... 5
User Manual I Endpoint Protector Mobile Device Management User Manual Table of Contents 1. Introduction... 1 1.1. What is Endpoint Protector?... 2 2. Activation of Mobile Device Management... 3 2.1. Activation
Enterprise Mobility Management
Enterprise Mobility Management Security Without Compromising User Experience SESSION ID: SPO2-R03 Brian Robison Principal Technology Evangelist, XenMobile Citrix Systems, Inc. Providing the freedom to
GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android
GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android 1 Table of Contents GO!Enterprise MDM
Sophos Mobile Control Startup guide. Product version: 3.5
Sophos Mobile Control Startup guide Product version: 3.5 Document date: July 2013 Contents 1 About this guide...3 2 What are the key steps?...5 3 Log in as a super administrator...6 4 Activate Sophos Mobile
BYOD: End-to-End Security
BYOD: End-to-End Security Alen Lo MBA(CUHK), BSc(HKU), CISA, CCP, CISSP, CISM, CEH IRCA Certified ISMS Lead Auditor, itsmf ISO 20000 Auditor Principal Consultant i-totalsecurity Consulting Limited alenlo@n2nsecurity.com
How To Protect Your Mobile Device From Attack
Manage and Secure the Mobile Data, Not Just the Device Stijn Paumen VP Business Development, Wandera The Great Platform Shift 60,000,000 iphone BlackBerry 50,000,000 40,000,000 30,000,000 20,000,000 10,000,000
Five Steps to Android Readiness
Five Steps to Android Readiness Android State of the Union Ready or not, Android is coming to the enterprise. The rise of Google s Android operating system has ushered a new wave of mobile devices and
PMDP is simple to set up, start using, and maintain
Product Datasheet IBELEM, SA ITS Group - 5, boulevard des Bouvets 92741 Nanterre Cedex - FRANCE Tel: +33(0)1.55.17.45.75 Fax: +33(0)1.73.72.34.08 - www.ibelem.com - info@ibelem.com PMDP is simple to set
Data Loss Prevention Whitepaper. When Mobile Device Management Isn t Enough. Your Device Here. Good supports hundreds of devices.
Data Loss Prevention Whitepaper When Mobile Device Management Isn t Enough Your Device Here. Good supports hundreds of devices. Contents Shifting Security Landscapes 3 Security Challenges to Enterprise
Android 4.0.4 Support on Galaxy Nexus, Nexus S, and Motorola Xoom for Microsoft Exchange Policies
Android 4.0.4 Support on Galaxy Nexus, Nexus S, and Motorola Xoom for Microsoft Exchange Policies Overview Requirements Supported Information Services Supported Security Policies Require password Require
#mstrworld. Support BYOD with MicroStrategy Mobile to cut costs and deploy to 1000s
#mstrworld Support BYOD with MicroStrategy Mobile to cut costs and deploy to 1000s!! Ivar Ljungberg Principal Consultant, MicroStrategy Mobile Advisory Team, EMEA BYOD Agenda What is BYOD? Why BYOD? Challenges
MaaS360 Mobile Device Management (MDM) Administrators Guide
MaaS360 Mobile Device Management (MDM) Administrators Guide Copyright 2014 Fiberlink Corporation. All rights reserved. Information in this document is subject to change without notice. The software described
Apple Configurator MDM Site - Review
Management Options ios New Market ipads - January 2010 Several changes in a short period of time. Apple Lion Server came out June 2011. Apple Configurator came out in June 2012. Why Absolute or Alteris?
TechnoLabs Software Services Pvt Ltd. Enterprise Mobility - Mobile Device Security
Enterprise Mobility - Mobile Device Security Story Context: TechnoLabs has been focusing and offers Enterprise Mobility as one of its solution offering. No can deny the fact that mobile computing can bring
Sophos Mobile Control User guide for Apple ios. Product version: 4
Sophos Mobile Control User guide for Apple ios Product version: 4 Document date: May 2014 Contents 1 About Sophos Mobile Control...3 2 About this guide...4 3 Login to the Self Service Portal...5 4 Set
ForeScout MDM Enterprise
Highlights Features Automated real-time detection of mobile Seamless enrollment & installation of MDM agents on unmanaged Policy-based blocking of unauthorized Identify corporate vs. personal Identify
Good for Enterprise Good Dynamics
Good for Enterprise Good Dynamics What are Good for Enterprise and Good Dynamics? 2012 Good Technology, Inc. All Rights Reserved. 2 Good is far more than just MDM Good delivers greater value and productivity
When a student leaves this intensive 5 day class they will have hands on understanding and experience in Ethical Hacking.
Ethical Hacking and Countermeasures Course Description: This class will immerse the student into an interactive environment where they will be shown how to scan, test, hack and secure their own systems.
How To Manage A Corporate Device Ownership (Byod) On A Corporate Network (For Employees) On An Iphone Or Ipad Or Ipa (For Non-Usenet) On Your Personal Device
Empowering BYOD and Mobile Security in the Enterprise Jeff Baum, APAC Managing Director Growth of Mobile Mobile worker population will reach 1.3 Billion in 2015 Source: IDC Worldwide Mobile Worker Population
Trust Digital Best Practices
> ARMING IT AGAINST SMARTPHONE THREATS Trust Digital Best Practices April 2009 The information contained herein is subject to change at any time, and Trust Digital makes no warranties, either express or