Mobile protection

0
677 views

Due to the increased popularity of smartphones and tablets, these are more and more popular targets for cyber-criminals. These small devices now act as computers, huge amount of personal and business data is available.
New types of threats pop up, e.g. fake networks, malicious apps, smishing, vishing, access to unknown wifi net, etc.
Which are the main threats you had to face or just identified?
Which basic security tips you set up?

Databases
Mobile Devices
Threat & Vulnerability Management
Paolo Beffagnotti
76 months ago

6 answers

1

Since tablets are mainly used for accessing the cloud, we don't and don't have client put data on them, especially sensitive data. The threats are extremely rare compared to PCs that is isn't a concern. I would not suggest any app that keeps a local copy of data on them.

Mark Mancini
76 months ago
Agree - Dr. David E. 64 months ago
1

Few of the basic tips are - 
1) Always update your OS ( be with the latest)
2) Never install untrusted apps ( Where you are not very sure about the publisher). 
3) Never allow permission to all the apps to sync your data to their servers or cloud. That is fatal. 
4) Never store sensitive data on your phone (Credit card pics, document pics, etc )
5) Keep changing the locking password of your phone. 
8) Beware of the apps those who are asking too many permissions. 

Hitesh Mathpal
76 months ago
good points! the password topic is a simple step that most of the people fails with - Paolo 76 months ago
There are studies where many people ( And sometime more than 50%) don't even have a password for their mobile devices. - Hitesh 76 months ago
Or using qwerty. 123456, password, etc. - Paolo 76 months ago
Yes, that is a very good catch. - Hitesh 76 months ago
Good list - Dr. David E. 64 months ago
1

Agreed with keeping important data in the cloud and not locally on a device. Two other things to consider, dependent upon the business case:

  1. virtual desktops (or RDS)
  2. two factor authentication, as done by many financial institutions today....username/password not sufficient to get to application or data, need to also Authenticate via code text to phone

Gates Ouimette
76 months ago
Both virtual desktops and 2 factor authentication are good tips, thanks. Are you using these? - Paolo 76 months ago
Public AND Private Keys - Dr. David E. 64 months ago
1

Pablo, our firm does use 2FA (two-factor authentication) via a 3rd party authenticator (eg think Microsoft or Google).
i worked for a virtual desktop company, since acquired by VMWare, whose product we used internally...very functional. Market acceptance was minor since it was a change, similar to the still-there cloud resistance in the channel.

Gates Ouimette
76 months ago
Thanks for sharing your cases. which was the best experience to you? 2FA or virtual desktop? - Paolo 76 months ago
Thanks - Dr. David E. 64 months ago
1

Virtual desktop was actually very functional but is very different approach....most IT people, including channel, seem to prefer 2FA. Virtual desktop may be too big a paradigm shift for most.

Gates Ouimette
76 months ago
Thanks - Dr. David E. 64 months ago
1

Biggest threat is personal data breach which includes your calls, texts, pics, emails, apps you use etc. It is not that difficult for a pro hacker to exploit device using apps as developers hardly focus on SSDLC, and more on the quality and look.

And now we are using IoT devices at home, office, hospitals and controlling them with our mobile app, it is really a big concern for everyone.

Best precaution I can think of currently is using security on top of OS and checking the permissions before installing any app. We should always keep our data on cloud rather than local device. There should be some strict security guidelines that developers should follow before launching their app on stores.

Himanshu Mehta
69 months ago
Good thoughts - Dr. David E. 64 months ago

Have some input?