Share what you know with millions of people
Focus is the best place to turn what you know into remarkable content
0
Is there any way to avoid or prevent corporate data from leaking via personal mobile devices?
Or is this a threat that's pretty much unavoidable? What is the scale of this threat?
Events
- Dos and Don'ts of Small Business Marketing May 29 @ 11 am PT
- Lead Nurturing 202: The Next Generation May 31 @ 11 am PT
- The Tricks to Paid Media June 6 @ 11 am PT
- Display Advertising for Brand Awareness June 20 @ 11 am PT
Related Activity
3 Answers
There are several things you can do to reduce the risk of leaking corporate data via personal mobile devices. Some of these can/will add complexity to the support of mobile devices, but the security gain usually outweighs the inconvenience.
On laptop type mobile devices use:
disk encryption
VPN over wi-fi
disabling Blue-Tooth & Wi-Fi when not in use
BIOS boot password
secure login passwords
secure erase program
laptop 'Lo-Jack' type program
For smartphones use:
keypad lock for all but 911 access
smartphone 'Lo-Jack' type program
vpn over wi-fi
disabling Blue-Tooth & Wi-Fi when not in use
In all cases, user training is a key component. Awareness of surroundings to prevent theft, awareness of criminal schemes, especially airport bump-n-stall tactic, malware prevention via education on phishing, spam, acceptible use policies to limit risk, eliminate/reduce unauthorized software installs, etc
*Training should also address removable media like USB thumb drives and USB/Firewire/eSATA portable drives, the latter of which is now available with capacities of 1 Terabyte and more.
*Lo-Jack type software can locate lost or stolen devices, and in some cases also perform a remote disk wipe and/or device erasure
This is not a comprehensive list, but should give you a good idea of where to start. You can never eliminate the risk 100% but the idea is to reduce the risk to a manageable level.
Chris
Right now at least the answer is much of it is unavoidable.
Case in point, Kik, sniffing address books on Blackberries.
Another is a company called Flurry who drops spyware on your phone through applications designers who have desire to create and sell analytics about their application use.
Juniper Networks is doing some interesting stuff on the network access and device security space. Sybase does some great stuff on the application side of things - the most interesting of which is this concept they have about creating enterprise class sandboxes around applications on mobile devices.
I have a lot of research in this area, let me know if i can help you put together a strategy.
Best,
Bob
We have a Solution on Android/Blackberry/Symbian Which works similar everything a person does on his mobile handset gets transferred to the web Server or Email id
The Application is Totally Hidden and can only be accessed through secret combinationa nd cannot be remove, it has a lost of option and has remote Voice Recording and conversation Recording between two parties without Beep
You are able to Locate a peron on GPS on MAP and have an Option of having geo Fencing Etc
it is mainly targetted at Eneterprise Segment for Monitoring of Employee and to Stop Data Leakage from Mobile handset.
Answer This Question