This document discusses the security risks posed by increased mobility and use of mobile devices. It notes that mobile malware is up 1200% and that many popular apps leak user data or have other security vulnerabilities. Common attacks on mobile devices include SMS phishing, location tracking without permission, and fake banking apps. The document advocates for building intelligence on mobile threats and improving incident response. It also promotes securing devices, applications, and communications to protect against the risks that arise from increased mobility.

1. The Power To Secure
Mobile
changes
everything
no one is
Safe…
Jorge Sebastiao
COO

2. Motivations

3. Complexity

4. Apps, Apps, Apps, …

5. APPs leak data

6. mRAT spyware bypasses
mobile enterprise controls

7. Gowalla address book grab
without asking?

8. Mobile Location and GPS
not Protected

9. SMiShing

10. ViShing

11. Fake SMS news alerts

12. Mobile
Malware up
1,200% Q1
2012

13. Malware by platform

14. iPhone Hack Pw2Own

15. Android wipeout

16. Token in your pocket

17. Mobile payments
vulnerable

18. Android Email
vulnerable

19. Android Fake
banking tokens

20. 1.7Mil Apps High Risk

21. FinFisher toolkit

22. Mobility
put risk everywhere.

23. Attacks
will be everywhere
Mainframe
Minicomputer
PC
Desktop/
Internet
Mobile
Internet
1
10
100
1000
10000
100000
1000000
10000000
1940 1960 1980 2000 2020 2040
Devices/Users(millions)
YearRef: ITU, Morgan Stanley Research, 2009
- Smartphone
- Tablets
- Car Electronics
-- Mobile Medicine
-- Pay Systems
-- Mobile Banking
- GPS/Navigation
- Mobile Video
- Home Entertain
- Games
- Home Appliance

24. Mobile Changes Everything
No One’s Safe

25. BYOD becomes BYOM

26. MDM is not MDSM

27. Are your passwords are timeless?

28. URL? & QR Codes

29. Wireless Hotspots, Public

30. Safe Disposal

31. Mobile Attack
Knowledge
Base
Build Mobile Intelligence
Sources
Intel
Partners,
Vendors,
CERT ,…
Internal
Security
Research
Internet,
Mailing lists
and other
sources
Mobile
Incidence Response

32. Better Incidence Response
Analyse
Contain
Eliminate
Restore
Lessons
Policy Refine Policy
Continuous Monitoring
T-1 T 0 T 1 T 1 T 3 T 4 T N
Communicate

33. Securing Device

34. Securing Voice & SMS

35. Securing Applications &
Emails, Contacts,…
Company
Environment
Company
Security
User
Environment
User
Security

36. Securing mobile
collaboration
Hosted Services for companies
SENSE Mobile
Access
- BYOD ready
- End-to-end
control
- Highly secure
Traditional Access
- For internal users
Carrier
Custom Services
StandardSENSE

37. The Power To Secure
Q&A
…
http://linkedin.com/in/sebastiao