SmartPhone and Security
Mobile spyware is malicious software which is used to spy and control mobile devices (BlackBerry, PDAs, Windows Mobile and Cell Phones). Mobile spyware will not only intercept the message between two devices but also determine the location of the device. Basically, mobile spyware software is installed on a mobile device to spy on them.
Small businesses are usually not equipped to handle these threats. Just like laptops and desktops – mobile devices need security controls like antivirus, personal firewall, encryption and VPN to provide needed level of protection. Small businesses need to be aware of the security threats, like they might think that they are installing a game, which might very well be a key logger (logs your key strokes) or trojan software.
Mobile Devices Threats
| Threats | Countermeasure | Comments |
|---|---|---|
| Malware infection (Trojans, worms, viruses) | Anti-virus software’s are available for some platform. Disable wireless communication is a common defense | To Protect from the most malwares |
| Physical threats | Encrypt data – Don’t use weak encryption like WEP, use WPA/ WPA2 with AES | To Protect against stolen mobile device |
| Wireless LAN capability | Disabling wireless communication is the best defense | To avoid wireless attack that allows capturing (sniffing) of data in a coffee shop |
| Authentication spoofing | Two factor (dual) authentication, Use 802.1x EAP that include encrypted tunnels | Hacker gains access by presenting your credentials or pretending to be you |
| Out of date patches – Operating systems and software patches | Up to date patches | For operating system and all relevant software’s |
| Lack of specific security policy and awareness | Educate employees not to disable security controls. Don’t plug-in unprotected personal devices at work place | Awareness should include latest threats, symptoms of infection, and how to protect their mobile devices |
Hackers on the move, WSJ August 11, 2008 by Roger Cheng – where he writes about more companies are letting employees use their personal smart phone at work and the security experts warns about the present threats in the industry. http://online.wsj.com/article/SB121803418845416977.html
Tips to safeguard your smartphone
(Free Two-Day Shipping from Amazon Prime). Great books



Leave a Reply