Mobile security

1. MOBILE
SECURITY
TAJWAR KHAN
Cyber Security Expert

2. ABOUT ME
TAJWAR KHAN
• Lucideus Certified Cyber Security Expert
• Security Analyst, Cyber Crime Cell Lucknow
• Member, Open Security Alliance
• CEO & FOUNDER,
Ethical Learner
Code Ethics

3. YOU DON'T NEED TO
BREAK A WINDOW TO
BREAK INTO A HOUSE
YOU JUST NEED
SOMEONE TO
LET YOU IN

4. MOBILE USERS ARE

5. 3 VECTORS OF
NetworkAttacks OS ExploitsInfectedApps

6. DAMAGES
Tracking
LocatIon
Emai l
Stealing
Stealing
Contacts
Microphone
Recordings
Taking
Phot os
Stealing
Passwords
Hijacking
Messages

7. MAJOR ATTACKS

8. MISCONCEPTIONS
ABOUT
MOBILE SECURITY
#1
"EMM/MDM
can protect me."
#2
"Secure Container
can protect me."
#4
"iPhone is immune
against threats."
#5
"Mobile AV can
protect me."
#3
"It’s not a top
priority."

9. Container
EMM
1,200
Devices
BYOD
400

10. INFECTED
DEVICES
Credential
Stealers
Unauthorized
Root Kits
mRATs
Keyloggers

11. ITIS
A BIGDEAL

12. #1 #2 #3
#4 #5
"EMM/MDM
can protect me"
"Secure Container
can protect me"
"iPhone is immune
against threats"
"Mobile AV can
protect me"
MISCONCEPTIONS
ABOUT
MOBILE SECURITY
"It’s not a top
priority."

13. WHAT ABOUT
iOS?
is iPhone immune to
threats?

14. CAN YOU TRUST
3rd PARTYAPP STORES?
vShare.Com
150M users,25% iOS.
15,000 iOS apps
25PP.Com
More than 40Musers,
8 M downloads aday

15. XcodeGhost
Collects user and
device data and
sends to C&C
server
Over 4,000
malicious apps in
Apple App Store
Source: blog.checkpoint.com

16. Side Stepper

17. BUT STILL…
ANDROID IS17 TIMES MORE
PRONE TOTHREATSTHAN iOS*
Vulnerability to fix
Only 20%
Update Android OS
Google Play Is le ss
securedthan Apple
App Store
*Source: Check Point Mobile Threat Prevention Intelligence

18. Canmobile anti-virus
really protect me?
WHAT ABOUT
ANTI–VIRUS?

19. HOW MOBILE ANTI
–VIRUS WORKS?
SIGNATURES
Can beeasily bypassed
by obfuscation

20. Bypassing AV Detection of Mobile
Spyware

21. Malware
detected by
Anti Virus

22. Obfuscation
tool for
Android
apps
Obfuscated
version of
Phonetail
app
created

23. Malware
bypassed AV
Inspection

24. AV CANNOT
PROTECT
AGAINST
UNKNOWN
MALWARE

25. #1 #2 #3
#4 #5
"EMM/MDM
can protect me"
"Secure Container
can protect me"
"iPhone is immune
against threats"
"Mobile AV can
protect me"
MISCONCEPTIONS
ABOUT
MOBILE SECURITY
"It’s not a top
priority."

26. MOBILE
SECURITY
BUILDING
BLOCKS
Mobile Device
Management
PolicyEnforcement
Secure
Containers
Data Leakage
Prevention
Anti-Virus,
App Reputation
Known Threats
Mobile Threat Prevention
Unknown Threats and Zero Day

27. MOBILE THREAT PREVENTION
Advanced Threat
Detection and Mitigation
Best Mobile Threat
Catch Rate
Full Visibility
Simple Deployment

28. MDM
EMM

29. ©2015 Check Point Software Technologies Ltd. 28
Threat Technologies
Advanced App
Analysis
Sandboxing (Emulation)
Advanced Static Code
Analysis
Uncovers new malware
and targeted exploits
NetworkAnomaly
Detection
Wi-Fi Man-in-the-Middle
(MitM) attacks
Evasive botnets and
time bomb malware
Host Threat
Analysis
Malicious
Configurations
Exploits and file system
manipulation
Threat Framework
Multi-dimensional
Risk/Trust assessments
Accurate risk
classifications to
effectively mitigate risk
[Protected] Non-confidential content

30. MAXIMUM
LEVELOF
SECURITY

31. WITHOUT
IMPACTING
USABILITY
It’sAllAbout the End
User Experience

32. ©2015 Check Point Software Technologies Ltd. 31
Taking Mobile Security Beyond
Mobile Threat Prevention
[Restricted] ONLY for designated groups and individuals
Mobile Threat
Prevention
Threat Prevention for
mobile devices
Capsule
Cloud
Protect laptops
when off the
business network
Capsule
Workspace & Docs
Protect business data
on mobile devices
Target solutions for mobile use-cases

33. ©2015 Check Point Software Technologies Ltd. 32
Capsule Workspace
Protect business data E V E RY W H E R E
*****
SECURELY log-in
EASILYACCESS
business applications
PLACE ONLY business information under
IT’s control

34. ©2015 Check Point Software Technologies Ltd. 33
Classify
Share
Encrypt
Capsule Docs
SECURITY FOLLOWS THE DOCUMENT

36. QUESTION?