Smartphone security issues

•

0 gostou•856 visualizações

Aleksandra Gavrilovska

Tecnologia Negócios

What can you do ?

•  Lock
access
to
the
phone
with
PIN
or

password

•  Backup
phone
data
in
the
cloud,
computer,

memory
card

•  Find
My
iPhone

•  Where’s
my
Droid

3

Malicious software
•  Easily
distributed
via
applicaKon
stores

without
security
mechanism

•  Pirated
versions
of
legiKmate
apps

•  Fetch
apps
from
links
on
the
web

(“malverKzing”)

•  Install
soSware
which
targets
communicaKon,

user
locaKon
or
other
personal
data

•  SMS
trojan
and
premium
SMS

5

What can you do ?

•  Avoid
changing
phone’s
factory
seVngs

•  Don’t
jailbreak
or
root
your
phone

•  Install
apps
only
from
trusted
sources

•  Read
app
reviews

•  Read
permissions
requested
by
applicaKon

before
installing
it

•  Install
ﬁrmware
updates
provided
by
the

manufacturer

6

Malicious QR codes
•  QR
code
usually
contain
web
link

•  Smartphone
browser
is
automaKcally

launched

•  Install
malware

•  Link
to
phishing
site

•  Steal
informaKon

8

What can you do ?

•  Use
app
that
has
built
in
securiKes
features

(Norton
Snap)

•  Enable
QR
code
review

•  Check
if
it
is
sKcker
(in
real
life)

9

What can you do ?

•  Don’t
transmit
sensiKve
data
via
public
Wi-‐Fi,

which
is
usually
unencrypted

•  Send
sensiKve
data
to
sites
that
you
trust

•  Check
if
it
web
address
starts
with
haps

•  Use
secure,
encrypted
VPN
to
connect
to

corporate
network

11

What can you do ?

•  Use
Mobile
device
security
tools

–  Mobile
device
management

–  Sandboxing

–  Secure
browsers

13

…because we develop
mobile applications…

14

OWASP Mobile Security Project

•  OWASP
FoundaKon

•  For
developers
and
security
teams

•  How
to
build
and
maintain
secure
mobile
apps

•  Primary
focus
on
applicaKon
layer

15

OWASP Mobile Security Project

•  Top
Ten
Mobile
Risks

•  Mobile
security
tesKng

•  Mobile
cheat
sheet
series

•  Secure
mobile
development

•  Top
ten
mobile
controls
and
design
principles

16

Mais conteúdo relacionado

Mais procurados

Cyber security and Privacy Awareness manual Jay Nagar

Communication security 2021MuhammadusmanRana10

OPSEC for OMBUDSMENNaval OPSEC

MOBILE PHONE SECURITY./ MOBILE SECURITYJASHU JASWANTH

101 Internet Security Tips Slideshow - Know How To Protect Your Computer Online!EMBplc.com

ICT and end user security awareness slidesjubke

Dos and Don'ts of Internet SecurityQuick Heal Technologies Ltd.

Network basic securityMohamed Radji

Jeopardyzed_o07

WISE KIDS Leaflet: eSecurityWISE KIDS

Traveling safely with smartphones 16 jun14Naval OPSEC

Mobile app securitywhitecryption

SmartphoneNaval OPSEC

Spyware risk it's time to get smartKanha Sahu

User's Guide to Online Privacycdunk12

Security awarenessJosh Chandler

Mobile security by Tajwar khanTajwar khan

Cyber securityPihu Goel

Presentation about security I.T.HugoBarrionuevoSobri

Mais procurados (19)

Cyber security and Privacy Awareness manual

Communication security 2021

OPSEC for OMBUDSMEN

MOBILE PHONE SECURITY./ MOBILE SECURITY

101 Internet Security Tips Slideshow - Know How To Protect Your Computer Online!

ICT and end user security awareness slides

Dos and Don'ts of Internet Security

Network basic security

Jeopardy

WISE KIDS Leaflet: eSecurity

Traveling safely with smartphones 16 jun14

Mobile app security

Smartphone

Spyware risk it's time to get smart

User's Guide to Online Privacy

Security awareness

Mobile security by Tajwar khan

Cyber security

Presentation about security I.T.

Destaque

Smartphone & Security15215822

Smartphone securityMuthu Kumar

Communicationyamingd

Dave Briggs - Engaging ChangePaul McElvaney

Lecture 7Debasish Pratihari

My Learning PoolPaul McElvaney

Scotweb PresentationPaul McElvaney

Nilga Feb 2009Paul McElvaney

Pobedite 10 slabosti u poslu koje EU ne trpiMaja Vujovic

Lezing XeroxSjef Kerkhofs

Introduction to chef frameworkmorgoth

Dispara tu carrera profesional: por qué unirse a una ComunidadAgustin Benito Bethencourt

Fip lezing Istanbul deel 1Sjef Kerkhofs

lezing Online netwerkenSjef Kerkhofs

Aag presentatie 3 februariSjef Kerkhofs

产品思考yamingd

A pilot study to evaluate nutritional influences on gastrointestinal symptoms...ivdacruz

Learning Pool Webinar: Creating, editing and using imagesPaul McElvaney

Learning Pool's Mark Lynch and Kevin Gallagher on 'Next Generation DLE'.Paul McElvaney

Ana Virtual WorldsAssociation of National Advertisers

Destaque (20)

Smartphone & Security

Smartphone security

Communication

Dave Briggs - Engaging Change

Lecture 7

My Learning Pool

Scotweb Presentation

Nilga Feb 2009

Pobedite 10 slabosti u poslu koje EU ne trpi

Lezing Xerox

Introduction to chef framework

Dispara tu carrera profesional: por qué unirse a una Comunidad

Fip lezing Istanbul deel 1

lezing Online netwerken

Aag presentatie 3 februari

产品思考

A pilot study to evaluate nutritional influences on gastrointestinal symptoms...

Learning Pool Webinar: Creating, editing and using images

Learning Pool's Mark Lynch and Kevin Gallagher on 'Next Generation DLE'.

Ana Virtual Worlds

Semelhante a Smartphone security issues

Mobile Security - Dutch Mobile .Net DevelopersAlberto Aguzzi

Creating secure apps using the salesforce mobile sdkMartin Vigo

Mobile security, OWASP Mobile Top 10, OWASP SeraphimdroidNikola Milosevic

Developing secure mobile apps by Alexandru Catariov EndavaMoldova ICT Summit

iOS Application Security.pdfRavi Aggarwal

Mobile Application Security Threats through the Eyes of the Attackerbugcrowd

Debunking the Top 5 Myths About Mobile AppSecNowSecure

Android Application Security Awareness Talk, OWASP MEETUP Q3, 2015Sina Manavi

Android Camp 2011 @ Silicon IndiaAvinash Birnale

Hacking Mobile AppsSophos Benelux

Mobile Apps SecurityXavier Mertens

Analysis and research of system security based on androidRavishankar Kumar

Android securityMohamed Alharbi

How to make Android apps secure: dos and don’tsNowSecure

Compliance made easy. Pass your audits stress-free.AlgoSec

Defending Behind the Mobile DeviceTyler Shields

android Security darkC0de

Mobile Threats and Owasp Top 10 RisksSantosh Satam

Lumension Security - Adjusting our defenses for 2012Andris Soroka

Hacking By NirmalNIRMAL RAJ

Semelhante a Smartphone security issues (20)

Mobile Security - Dutch Mobile .Net Developers

Creating secure apps using the salesforce mobile sdk

Mobile security, OWASP Mobile Top 10, OWASP Seraphimdroid

Developing secure mobile apps by Alexandru Catariov Endava

iOS Application Security.pdf

Mobile Application Security Threats through the Eyes of the Attacker

Debunking the Top 5 Myths About Mobile AppSec

Android Application Security Awareness Talk, OWASP MEETUP Q3, 2015

Android Camp 2011 @ Silicon India

Hacking Mobile Apps

Mobile Apps Security

Analysis and research of system security based on android

Android security

How to make Android apps secure: dos and don’ts

Compliance made easy. Pass your audits stress-free.

Defending Behind the Mobile Device

android Security

Mobile Threats and Owasp Top 10 Risks

Lumension Security - Adjusting our defenses for 2012

Hacking By Nirmal

Último

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays

Platformless Horizons for Digital AdaptabilityWSO2

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...DianaGray10

ICT role in 21st century education and its challengesrafiqahmad00786416

Vector Search -An Introduction in Oracle Database 23ai.pptxRemote DBA Services

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoffsammart93

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

Why Teams call analytics are critical to your entire businesspanagenda

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Orbitshub

Six Myths about Ontologies: The Basics of Formal Ontologyjohnbeverley2021

Finding Java's Hidden Performance Traps @ DevoxxUK 2024Victor Rentea

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdfOrbitshub

Apidays New York 2024 - The value of a flexible API Management solution for O...apidays

TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc

WSO2's API Vision: Unifying Control, Empowering DevelopersWSO2

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...Angeliki Cooney

Artificial Intelligence Chap.5 : UncertaintyKhushali Kathiriya

Smartphone security issues

1. Smartphone security issues What can you do? NCA Seminar, Krushevo, 2013 Aleksandra Gavrilovska

2. Losing your smartphone 2

3. What can you do ? •  Lock access to the phone with PIN or password •  Backup phone data in the cloud, computer, memory card •  Find My iPhone •  Where’s my Droid 3

4. Malicious software 4

5. Malicious software •  Easily distributed via applicaKon stores without security mechanism •  Pirated versions of legiKmate apps •  Fetch apps from links on the web (“malverKzing”) •  Install soSware which targets communicaKon, user locaKon or other personal data •  SMS trojan and premium SMS 5

6. What can you do ? •  Avoid changing phone’s factory seVngs •  Don’t jailbreak or root your phone •  Install apps only from trusted sources •  Read app reviews •  Read permissions requested by applicaKon before installing it •  Install ﬁrmware updates provided by the manufacturer 6

7. 7

8. Malicious QR codes •  QR code usually contain web link •  Smartphone browser is automaKcally launched •  Install malware •  Link to phishing site •  Steal informaKon 8

9. What can you do ? •  Use app that has built in securiKes features (Norton Snap) •  Enable QR code review •  Check if it is sKcker (in real life) 9

10. Vulnerable wireless networks 10

11. What can you do ? •  Don’t transmit sensiKve data via public Wi-‐Fi, which is usually unencrypted •  Send sensiKve data to sites that you trust •  Check if it web address starts with haps •  Use secure, encrypted VPN to connect to corporate network 11

12. PANIC 12

13. What can you do ? •  Use Mobile device security tools –  Mobile device management –  Sandboxing –  Secure browsers 13

14. …because we develop mobile applications… 14

15. OWASP Mobile Security Project •  OWASP FoundaKon •  For developers and security teams •  How to build and maintain secure mobile apps •  Primary focus on applicaKon layer 15

16. OWASP Mobile Security Project •  Top Ten Mobile Risks •  Mobile security tesKng •  Mobile cheat sheet series •  Secure mobile development •  Top ten mobile controls and design principles 16

17. Thank you. 17

Smartphone security issues

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (19)

Destaque

Destaque (20)

Semelhante a Smartphone security issues

Semelhante a Smartphone security issues (20)

Último

Último (20)

Smartphone security issues