Tunis, Tunisia 23 May, Encryption and Privacy

Transcription

1 Tunis, Tunisia 23 May, 2016 Encryption and Privacy

2 2 March 5 th 2016: Amazon Abandons Encryption on Devices

3 3 March 6 th 2016: Amazon Brings Encryption Back to Devices

4 4 Why all the confusion and the noise?

5 5 The result: The crypto war is in full swing

6 6 and bleeds across individual, government and economic priorities.

7 7 While the world is increasingly aware of cyberthreats, both legal and illegal trade in personal data, and vast government programs

8 8 There is much that is still outside of the public awareness, even if it is written in plain view.

9 Selling the digital self Most people forget that when they download an app or sign into a website with Facebook, they are giving those companies a look into their Facebook profile. Your profile can often include your address and phone number as well as your work history and current location. And most people don't realize that if you're sharing that data with friends, then apps used by those friends can see that data as well! 9 -Business Insider

10 10 How did we get here? 10 Simple Steps Idea of a free Internet Valuation and Monetization issues Advertising google model Mass data collection 9/11 Patriot Act Increased granularity and specificity Widespread Government surveillance Public backlash Digital Self= you are the product Security vs Security

11 An endless debate Encryption is dangerous because of the threat! My threat is more threatening than yours. A lack of encryption is dangerous because of the threat! I disagree. 1

12 The Reality of Mobile Application Privacy 83 % 70 % 56 % Request Full Network Access Access Hardware Access User Data 12 Source: PEW Research June Sep 2014

13 Most individuals undervalue the security of their personal data until something bad happens 1

14 And, though you wouldn t think it s the case, most enterprises and governments apparently undervalue the security of their data (and yours) until something bad happens 1

15 The Enterprise is Vulnerable 57% of organizations consider employees as the most likely source of an attack. (EY) Mobile Malware numbers more than doubled between 2014 and (ABI Research) The vulnerability management market will grow from US $5.8B in 2016 to US $8.6B in (ABI Research) #1 of IT s weakest security links are perceived as mobile devices, followed by social media. (CyberEdge Group) 75% year-over-year increase in U.S. mobile malware rates in (Lookout) 75% or more mobile apps would fail basic security tests. (Gartner) 40% of U.S. employees of large enterprises use their personal devices for work. (Gartner) 15

16 Business can no longer operate privately without help. Business travel Executives and employees operating outside of areas under direct corporate control such as airports or clients offices Communications Executives and employees communicating with advisors, suppliers, or customers abroad or over untrusted phone/data lines Mobile Data Executives and employees using their mobile devices to access sensitive corporate data Operations abroad Business conducted in countries known to monitor communications networks 16

17 Our solution: Building privacy without compromise The Enterprise Privacy Platform 17

18 Low touch enterprise architecture Enhanced ZRTP Peer-to-peer encryption Ephemeral keys Real-time MiTM detection Continuous OS updates 18

19 Devices The ability to communicate privately - anywhere.

20 Devices Blackphone A privacy engineered solution that offers risk management to enterprise communications. Silent OS Default full-disk encryption Security Center Spaces - allowing work and personal lives to coexist on one phone MDM integration Vulnerability management (within 72 hours) 20

21 Devices Blackphone Technical Specifications 13 MP BSI Camera Sensor (5 MP front) Qualcomm Snapdragon Octa-Core Processor 3GB RAM & 32GB Internal Storage microsd card slot supports additional 128GB 3060 mah Battery with Quick Charge " FullHD Gorilla Glass display 21

22 Devices Blackphone Privacy, Choice, Control Feature Blackphone Blackberry Samsung S6 Search Anonymized Traceable Traceable Bundled Apps* Few - All privacy-enabled by Security Center Bloatware - Privacy disabled by default Bloatware - Privacy disabled by default Wi-Fi usage Text & Voice Communication Smarter Wi-Fi Manager enables Wi-Fi only in trusted locations Private calls, texting, video chat, file exchange, browsing, and conference calls Updates Offered quickly and directly within 72 hours for security issues Remote Wipe & Anti Theft Anonymous, with default full disk encryption Always on for geolocation and user tracking No protections Infrequent, limited by carrier/manufacturer Requires use of centralized cloud account Always on for geolocation and user tracking No protections Infrequent, limited by carrier/manufacturer Requires use of centralized cloud account Protection of private information Delivers privacy Aggregates data Aggregates data 22

23 Devices Security Center At the heart of Silent OS, Security Center puts privacy settings at the user s fingertips. Remote wipe Unknown sources Individual privacy at phone/space/app level Easily configure settings for individual spaces Manage apps sharing and privacy across spaces Fine tune individual app permissions 23

24 Devices Spaces BYOD Usability & Enterprise Security Virtual BYOD separate and secure Spaces Enabling user and Enterprise privacy Compartmentalized work life and personal life can coexist on a single device Drives user satisfaction while reinforcing enterprise security Enables Enterprise policy control and choices 24

25 Software Extending private communications to ios and Android

26 Software Silent Phone Secure Voice Unlimited mobile-to-mobile calling HD Call Quality, peer-to-peer encryption Voice-to-video with just a tap * Simple, secure conference and video calls * Multi-device support * Built-In Secure Messaging Easily send secure messages to other SP users Encrypted file transfers up to 100MB * Burn messages capability from 1 min to 90 days * 26 * Features only available with Plus subscription Basic is limited to member calls and standard messaging

27 Software Silent World A global encrypted calling capability that offers greater privacy and better quality. Communicate privately from nearly anywhere in the world. Provides a bubble of protection anywhere Unlimited member to member calling Unlimited inbound calls Value = more privacy and less cost No roaming charges 27

28 Software Market Mobile App Comparison Application Encrypted in Transit? Encrypted so that the provider can t read? Can you verify contacts identities? Are past comms secure if your keys are stolen? Is the code open to independent review? Is security design properly documented? Has the code been audited? Silent Phone Blackberry Messenger CellCrypt* imessage/ FaceTime Skype WhatsApp Wickr 28 Source: Secure Messaging Scorecard, The Electronic Frontier Foundation (EFF). 2015, June 12; * Information on CellCrypt was retrieved independently and reviewed 2015, September 10;

29 Services Simple and secure

30 Services Silent Manager Simple and secure Secure administrator access Web-based service Manage plans, users, groups API enabled 30 Large scale deployment

31 Thank you!