...Some people / organizations will be a target REGARDLESS of what they do, but most will be a target / victim BECAUSE of what they do

Transcription

1

2 ...Some people / organizations will be a target REGARDLESS of what they do, but most will be a target / victim BECAUSE of what they do (2013 DATA BREACH INVESTIGATIONS REPORT p.1)

3 MOBILE D EVICE S AFETY & SECURITY PHYSICAL SAFETY Securing yourself and your devices from physical harm DATA SECURITY Securing the information within your devices COMMUNICATIONS SECURITY Securing the methods used to transmit information to/from your devices FINANCIAL SECURITY Securing the way you access financial data and Mobile Payments WHEN IT ALL GOES WRONG Securing yourself against Theft or Loss and preparing for Replacement or Upgrade

4 P HYSICAL S AFETY PROTECT YOUR DEVICE Case / Bumper Screen Protector PROTECT YOURSELF Be aware of surroundings - Minimize opportunity for theft Minimize use while walking / biking / driving Use mount or partner, not cupholder or handheld Minimize depth of field changes & fumbling USE BUILT IN PROTECTION Always lock with code / biometrics - 0.1% chance of random unlock Activate Find My Device features

5 SECURING YOUR D ATA - 1 IOS 8 & ANDROID 5.0 (LOLLIPOP) Full device encryption built in as long as device is locked - Apple / Google do NOT keep key. If no code is used, Device can be reset by anyone. Use it or Lose it CLOUD STORAGE Dropbox / icloud / Google Drive / One Drive Used to sync data between all devices & PC s Protected by passwords No history of data theft but there have been hiccups CLOUD SERVICES imessage and 3rd party apps feature end to end encryption is not mastered on Devices but stored and managed by the provider IoT - Home security and connected devices cannot be considered secure. Industry too young and focused on $$$, not security (Exception: HomeKit)

6 SECURING YOUR D ATA - 2 APP SECURITY Reputable Apps from Reputable Sources: Apple App Store / Google Play Check Publisher s name Search web using App name and malware Read reviews (and write them!) Permissions: Logical & Necessary? Common overreach: SMS, Location, Camera / Mic / Pics, Contacts / Calendar / Social Accounts Paid vs. Free - Are you the client or the product? App Malware - Prevalent for Android, minimal for Apple Health Data / Emergency Info - Yellow Dot equivalent

7 S ECURING YOUR COMMUNICATION - 1 RADIOS Cellular (4G LTE) Encrypted end to end - considered secure WiFi May / may not be locked with passcode required Assume INSECURE unless you set it up yourself Bluetooth New LE standard allows constant monitoring and transmissions Used by Headsets and Speakers; Primarily for voice & music, rarely Data Required for Apple AirDrop (Files / Pics) Considered secure due to limited range and use NFC / Peer to Peer Devices must be very close to one another (~6 ) Used for Android File Transfers, Pay

8 S ECURING YOUR COMMUNICATION - 2 VPN (VIRTUAL PRIVATE NETWORKS) Creates a virtual straw within the Wifi / Ethernet pipes Cannot be sniffed over network Encrypted end to end - considered secure Allows use of public WiFi for protected data / information PIGGYBACKED DATA Some information is broadcast continuously Cellular enabled devices are always looking for strongest signal Location is therefore tracked and may be stored Check Privacy setting on device to understand and limit exposure

9 FINANCIAL SECURITY - 1 ACCESS TO BANKING / INVESTMENTS / PORTFOLIOS Via Web - Direct to providers website using Browser (Safari / Chrome) Via App - Direct to provider using their custom designed interface Via Service - Accessed thru web service like Google / Yahoo / AOL Protected by Institutional or Service passwords. BANKING ALERTS Each Bank can be configured to notify you when a user defined event occurs Via Text / SMS / imessage Via Configure individual accounts for different alerts / thresholds

10 FINANCIAL SECURITY - 2 MOBILE WALLET Pay / Google Wallet / SoftCard / MCX Device is authorized and unique ID# is assigned to Secure Element For each transaction, a one-time code is generated on device and used to interface with payment terminal via NFC Merchant does not receive actual CC number, Payment is reconciled by Banks in < 1sec If Merchant is hacked, thief finds 1x code that is useless. Prevents another Home Depot / Target / etc Apple does NOT keep any records of transactions. Google DOES keep track of all purchases, locations, values, spending habits, etc Requires hardware / software combo. Many Android 4.4+ (KitKat) and all iphones with ios 8.1 AND fingerprint scanner (iphone 5S requires Watch)

11 MOBILE D EVICE S AFETY PREPARING FOR D ISASTER Device Backup Why? Don s Story idevices Automatic thru itunes over WiFi or USB Android OEM Built-in 3rd Party App Result: Lost, broken, or new devices can be restored easily.

12 *BEST P RACTICES * - PHYSICAL, DATA, AND COMMUNICATIONS PHYSICAL DATA SECURITY Use Cloud storage and services at your own risk; Use strong, unique passwords Purchase Apps from known curated stores ( App Store / Google Play) Android - Be vigilant! Many apps are malware. Check App s permissions and only allow what is logical and necessary If you're not the Client, then you're the Product. Peace of mind and privacy are worth the nominal costs. COMMUNICATION METHODS Be aware of your surroundings, protect yourself and your devices Keep devices locked and know how to use find my device features 4G / Cellular = Secure WiFi networks are INSECURE unless you personally set it up. COMMUNICATION SECURITY VPN s allow secure use of any WiFi. Available through subscription Be aware of what your devices are communication on a regular basis. Are they broadcasting Location? Anything else?

13 *BEST PRACTICES * - MOBILE BANKING, PAYMENTS, AND B ACKUP BANK / INVESTMENT SECURITY MOBILE PAYMENTS Access your banking and investments through the web or custom Apps authored by the institutions themselves only. Do NOT use 3rd party apps. Have a strong, unique password for each website / institution. Set up Alerts to monitor financial activity in real time. Mobile Banking can be secure if communication method is Cellular (4G), known secure WiFi, or VPN on any WiFi. If you meet the hardware/software requirements, Mobile Payments are MORE secure than traditional credit cards If you don t have devices that will work, look for these features in your next device as mobile payments will become more popular and accepted in the future. DISASTER PREVENTION & UPGRADE PLANNING Set up and follow plan for Backing up data to Cloud and your computer Use Built-in / recommended software automate the process

14 THANK YOU!

15