Best Practices in Mobile Device Management (MDM) Assoc. Prof. Dr. Thanachart Numnonda Executive Director IMC Institute

Transcription

1 Best Practices in Mobile Device Management (MDM) Assoc. Prof. Dr. Thanachart Numnonda Executive Director IMC Institute

2 Technology Trends 2

3 Gartner Top 10 Strategic Technology Trends Media tablets and beyond Mobile Device Battles Mobile-centric applications and interfaces Mobile Applications and HTML5 Social &contextual user experience Enterprise App Stores Application stores and marketplace The Internet of Things The Internet of everything Hybrid IT and Cloud Computing Next-generation analytics Strategic Big Data Big data Actionable Analytics In-memory computing In Memory Computing Extreme low-energy servers Integrated Ecosystems Personal Cloud Cloud computing 3

4 Cloud Computing Social Technologies Mobile Computing Information 4

5 Current Technologies That Will Shape Our Future Cloud Computing Smartphone Eye-Tracking Augmented Reality 3D Printing 3G/4G Wireless Broadband Social Networking Autonomous Car 5

6 Radical Transformation 6

7 Source :London Futurists; 7

8 The power of your hand in 10 years Look like this today Source: Winning in a Digital World; Mark Mueller-Eberstein 8

9 Global smartphones annual sales will grow about 46 percent to million units this year and will touch 1.05 billion units in 2014 [Credit Suisse; Apr 2012] 9

10 10

11 Worldwide Devices Shipment 11

12 Sales of Smartphones Source Gartner: April

13 Sales of Tablets Source Gartner: September

14 Smartphone Marketshare Q1: 2013 Source Strategy Analytics 14

15 Tablet Marketshare Q1: 2013 Source IDC 15

16 2013 Mobile will become the most common way of accessing the Internet Source :Trending the future: Mobile Trends

17 Welcome to The Post-PC Era 17

18 Smart TV 18

19 Source :London Futurists; 19

20 Digital Camera 20

21 21

22 Blood pressure monitor 22

23 Smart Watch 23

24 Emerging Mobile Technology QR Code NFC Tectiles 24

25 isquare Video 25

26 26

27 Google Glass 27

28 Augmented Reality 28

29 CIO Trends 29

30 CIO Survey, CIO magazine, January 2012 Q: In your opinion, which of the following trends will have the most profound effect on the CIO role in the future? 30 Source:BYOD (Bring Your Own Device)Randy Gower Good Technology

31 Bring Your Own Devices (BYOD) 31

32 Public Personal Cloud 32

33 Social computing is moving from being just on the outside of the organization to being at the core of business operations. Peter Sondergaard, senior vice president at Gartner,

34 Big data currently has the most significant impact in social network analysis and content analytics with 45% of new spending each year. Gartner,

35 Sign of the Times 1995: Employee Car 2005: Employee Cell Phone 2015: Employee Computer / Devices 35

36 BYOD 36

37 Mobile in Enterprise Gartner forecasts that in 2016, half of all non-pc devices will be purchased by employees. By the end of the decade, half of all devices in business will be purchased by employees. By 2016, 60% of large enterprises will implement limited access network zones to limit the connectivity of personally owned mobile devices. Gartner predicts that through 2017, 90% of enterprises will have two or more mobile operating systems to support. 37

38 Bring Your Own Devices (BYOD) 38

39 BYOD is not the Question It s already here. How do we secure personal devices? How do we secure the data? The policies go with the data and the risk, not the device Source Mobile Security & BYOD Policy, Sarkis Daglian and Isaac Straley 39

40 Connect Assets, People, Customers Source The Enterprise Appstore: Appear 40

41 Mobility Requirements Source The Enterprise Appstore: Appear 41

42 Mobility Requirements Source The Enterprise Appstore: Appear 42

43 BYOD PRO CON User flexibility Less control of devices Less devices for users Data security compliance More advanced devices on the network Who owns the data? Devices upgraded more How will you recover data if someone leaves? frequently that organization cycle Source Mobile Security & BYOD Policy, Sarkis Daglian and Isaac Straley 43

44 BYOD Risk 44

45 Top 5 BYOD Security Challenges Lost or stolen mobile devices Mobile vulnerabilities on the rise Abuse of mobile payment Mobile application-based threats Mobile web-based threats Source BYOD and Top 5 Network Security Threats for

46 CIO has a big responsibility 46 Source:BYOD (Bring Your Own Device)Randy Gower Good Technology

47 1. Lost or Stolen Mobile Devices Mobile devices are the fastest growing consumer technology Mobile Apps / Mobile Web Browsing Worldwide unit sales 300m in 2010, to 650m in Mobile applications are likewise booming Mobile Apps, 81 minutes Mobile Web Browsing, 74 minutes2 Impact Sensitive personal information or corporate intellectual property may get compromised Source BYOD and Top 5 Network Security Threats for

48 2. Mobile Vulnerabilities on the Rise Increased by 93% in 2011 Reinventing existing malware for mobile devices Creating mobile-specific malware Impact Designed for activities including data collection, the sending of content, and user tracking Source BYOD and Top 5 Network Security Threats for

49 3. Abuse of Mobile Payments Mobile payments target for mobile threats Mobile payment transactions $170 billion in 2010 $630 billion by 2014 Vendors, retailers, merchants, content providers, mobile operators, and banks are all actively establishing new payment services Impact Mobile payments create an attractive target for attackers w/direct monetization of attacks. Source BYOD and Top 5 Network Security Threats for

50 4. Mobile Application-Based Threats Malware Spyware Making charges to the user s phone bill Sending unsolicited messages to the user s contact list Text messages, Location Browser history Contact list Camera pictures Impact Steal personal information from a mobile device that could result in identity theft, financial fraud, or intrusion Source BYOD and Top 5 Network Security Threats for

51 5. Mobile Web-Based Threats Phishing Scams Drive-By Downloads Are designed to take advantage of vulnerabilities in a web browser or software that can be launched via a web browser such as a Flash player, PDF reader, or image viewer. Wi-Fi Sniffing Automatically begin downloading an application when a user visits a web page Browser exploits Use web pages or other user interfaces designed to trick a user into providing information Data intercepted by anyone listening across an unsecured local wireless network Impact Unauthorized access, data theft, identify theft Source BYOD and Top 5 Network Security Threats for

52 Risk in mobile environment 52 Source:BYOD (Bring Your Own Device)Randy Gower Good Technology

53 Managing Risk inbyod Source BYOD and Top 5 Network Security Threats for

54 10 Steps to a secure mobile strategy Source The 10 Steps to a Secure BYOD Strategy: Bradford Networks 54

55 10 Steps to a secure mobile strategy Source The 10 Steps to a Secure BYOD Strategy: Bradford Networks 55

56 Source What's your Enterprise Appstore: Partnerpedia 56

57 Enterprise App Store 57

58 Application Stores 58

59 Q1 2013, four leading stores hit 13.4 billion downloads, with revenue of $2.2 billion Canalys, April

60 60

61 Public App Stores : Issue Lack of business focus Lack of volume purchasing Security issues 61

62 Enterprise App Store: Definition An enterprise app store is a web portal through which end users can access, download and install corporate-approved software applications. 62

63 Enterprise App Store Source The Enterprise Appstore: Appear 63

64 Why Enterprise App Store? Distribution and Deployment Support Policy Enforcement App Improvement and Tool Set Development Branding and User Satisfaction License Management 64

65 By 2014, 60% of IT organization will deploy private app stores Gartner 65

66 Enterprise App Store Solution: Example 66

67 Mobile Device Management 67

68 The Burden Threats Credit: ChaiyakornApiwathanokul, S-Generation 68

69 Why MDM? Secure: Ensure integrity of configuration Higher ease-of-use Deploying LOB applications Lower TCO Source: John Rhoton, HP 69

70 Key Requirements Let users get access to data Give the enterprise control Secure sensitive data Integrate with the enterprise Help me solve the Dropbox issue Let us claw back sensitive data.. and don't muck with the user experience Credit: ChaiyakornApiwathanokul, S-Generation 70

71 Key Requirements Grant app acess one by one (no VPN freefor-all) Secure critical apps end-to-end Protect my network from bad apps Ensure and audit my transaction Ensure app performance and QoS Credit: ChaiyakornApiwathanokul, S-Generation 71

72 End-to-End simplified Mobile security framework Credit: ChaiyakornApiwathanokul, S-Generation 72

73 MDM Architecture Source: [X] Cube LABS 73

74 When MDM is required? 74

75 Thank you