Mobile device security informative v2

MOBILE DEVICE SECURITY

MUHAMMAD SALMAN ZAHID

AGENDA

Overview

Execution Model

• iOS

• Android

Risks

GPS

Attacks

Securing your Device

1/7

/20

15

2

MS

Z

OVERVIEW

Mainly focused on

• iOS

• Android

Same concepts also apply on other OSes

• Windows

• Blackberry

Smart Phones are simple computers

• Mobile devices don’t come with the tools required to analyze what’s happening

• Root level access required

1/7

/20

15

3

MS

Z

EXECUTION MODEL

Android & iOS

• Sandbox concept

• Each process runs it a partitioned environment

• No direct access to OS resources

• Not allowed to interact directly with other Applications or their data

iOS

• Strict API

• SDK enforces restrictions

• Applications must be signed and can only be deployed from a single trusted source

Android

• Dalvik VM

• Multiple/Unknown sources

1/7

/20

15

4

MS

Z

RISKS

• Virus

• Malware

• Buffer Overflow

• Password theft

• Key logging

Smart phones are computers

• FB

• E-mails

• Other applications

Multiple -Login Applications

1/7

/20

15

5

MS

Z

GPS

Global Positioning System

• Every smart phone has GPS

• Must aware the use of GPS

• GPS information passed on via third parties without your knowledge.

• For example: Face book, Maps etc.

1/7

/20

15

6

MS

Z

ATTACKS

• Most common among devices

• Avoid unnecessary pairingBluetooth

• Don’t use untrsuted Wi-Fi

Wireless Access Points

1/7

/20

15

7

MS

Z

SECURING YOUR DEVICE

• Graphic pattern is commonly usedUse password

• Automatic on in iOS

• Android: we can turn it on

• Hardware must be supported else slow responseUse Encryption

• Clouds are helpfulUse backup &

Sync.

• Supported in iOS

• Need an Application in Android

Lock device on multiple failed

attempts

1/7

/20

15

8

MS

Z

SECURING YOUR DEVICE CONT...

• Security cameras Be aware of Surrounding

• Applications Installation

• iOS & Google have certificates & CodesLevel of Trust

• Regular update itAntivirus

Ignore/Delete unknown prompted

messages/links

• Any abnormality can effect the BatteryMonitor Battery Life

1/7

/20

15

9

MS

Z

SECURING YOUR DEVICE CONT...

1/7

/20

15

10

MS

Z

1/7

/20

15

MS

Z

11