Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

VMworld 2012 - EUC 1823: What Makes a Mobile Workspace Better?

45 views

Published on

Security and Technical Details for VMware Horizon Mobile

Published in: Mobile
  • Be the first to comment

  • Be the first to like this

VMworld 2012 - EUC 1823: What Makes a Mobile Workspace Better?

  1. 1. © 2012 VMware Inc. All rights reserved Confidential EUC 1823: What Makes a Mobile Workspace Better? Security and Technical Details for VMware Horizon Mobile Srinivas Krishnamurti, Sr. Director, Mobile Solutions, VMware, Inc. Craig Newell, Sr. Staff Engineer, Horizon Mobile, VMware, Inc
  2. 2. Confidential Housekeeping ! Who are we? • Srinivas Krishnamurti, Sr. Director, Mobile Solutions • Craig Newell, Sr. Staff Engineer, Horizon Mobile ! Questions at the end please • There will be lots of time left... ! Twittering? Socialcasting? Hashtag #EUC1823 2
  3. 3. Confidential Agenda ! Motivation for Horizon Mobile ! See it live: • Horizon Mobile 1.2 (Android) • Horizon Mobile iOS Technology Preview ! A deeper dive in Horizon Mobile ! Q&A 3
  4. 4. Confidential Mobile Devices Today: Both Work AND Play Sources: 1Nielsen, May 2012. 2,Information Week, Feb 2012. 3iPass, Mar 2012. More than ½ of US mobile subscribers own smartphones1 43% of enterprises provide smartphones to employees in 20122 Employees 92% of workers believe their smartphones should be enabled for both work and personal use3
  5. 5. Confidential Current Approach Requires Managing the Whole Device 5 MobileDeviceManagement What actually needs to be managed by the enterprise Device Apps & Data Corporate Apps & Data
  6. 6. Confidential Instead: Manage Only What you Need To • Secure: The workspace is completely enterprise-owned and controlled • Support for corporate security, compliance and privacy policies • Corporate data is fully encrypted • Customizable: Ability to provision, manage and remove corporate data and applications on employees’ devices • Isolated: Complete separation of personal and corporate data • Employees’ data remains private 6 IT Admin The VMware Secure Mobile Workspace iOSAndroid
  7. 7. Confidential Corporate Workspace VMware Horizon Mobile: Own the Mobile Workspace 7 Horizon Manager Horizon Mobile Application Embrace employees’ preferred device by enabling access to a corporate workspace Allows IT Admins to customize the workspace and secure corporate data on employee mobile devices
  8. 8. Confidential Horizon Mobile 1.2 Android Demo 8
  9. 9. Confidential Horizon Mobile iOS Technology Preview Demo 9
  10. 10. Confidential Horizon Mobile Technical Overview ! Define Mobile ! Define Workspace ! Define Management ! Define Security ! Android Architecture ! iOS Architecture 10
  11. 11. Confidential Define Mobile ! Mostly connected portable computing devices • Availability and bandwidth not always present • Require ability to function without network connectivity • Mobile Phones & Tablets 11
  12. 12. Confidential Define Workspace ! Evolution from a single function device to a single application device to multiple communicating apps on a single device A USER’SGUIDE Contents Introduction Control Buttons....................................... 2 Getting Started Turning Your Pager On ........................... 3 Turning Your Pager Off ........................... 4 Using the Function Menu ....................... 5 Message-Status Screen......................... 6 Backlight................................................. 7 Receiving/Reading Personal Messages .......................... 7 Display Zoom ......................................... 9 Time and Date Setting the Time and Date.................... 10 Alerts Setting the Incoming Message Alert .... 12 Locking/Unlocking Messages Lock/Unlock a Message ....................... 14 Deleting Messages Delete a Single Message ..................... 15 Delete all Messages............................. 15 Pager Alarms Set a One-Time Alarm ......................... 16 Set the Alarm to Alert Daily.................. 17 Message Alarms Set a One-Time Message Alarm.......... 19 Set a Daily Message Alarm.................. 21 Private Time Set Private Time................................... 22 Maildrop/Information Service Option Maildrop Alerts ..................................... 24 Notebooks Storing Personal and Maildrop Messages in Your Notebooks ......... 28 Deleting Messages from Your Notebooks .................................. Features.................................................... 30 Care and Use............................................ 32 Battery Information.................................. 34 Installing/Replacing the Battery............ 34 1 Congratulations on purchasing an Advisor Elite pager.Your new pager provides exciting capabilities in messaging and can become a vital part of your business and personal life.The pager’s four-line display and expanded functionality incorporates many of the most advanced electronic, communications and wireless technologies available. The Advisor Elite pager uses FLEX® technology. FLEX technology extends battery life up to four times longer than ordinary pagers and improves the ability to receive messages. These compact pagers integrate messaging and time keeping functions in a package that is convenient to carry. Full understanding of what this product offers begins with reading this user’s guide.This user’s guide includes a detachable quick reference card on the back cover. Sending a Test Page to Yourself After you have read this guide and your pager has been activated by your service provider, send yourself a test page. Refer to “Functionality and Use of Your Pager” on page 32 for more information. INTRODUCTION 2 Effective Use of Your Pager Your pager can help you keep in contact with everyone important to you. By giving your pager number to your business associates, family, and friends, you can be contacted whenever needed. If you have a cellular phone, give your pager number instead of your cellular number.Then you can decide who to call back on your cellular phone without paying for incoming calls. Control Buttons Left/Right Directional Buttons Function/ Select Button Read/Escape/ Power On Button Up/Down Directional Buttons GETTINGSTARTED Package Content Options This Sprint PCS Phone™ comes equipped with astandard battery and an AC Adapter Charger to get you up and running. An exciting line of accessory options, now smaller and lighter than ever, can customize your wireless package for maximum performance and portability. 66 99 33 55 88 00 22 44 77 11 lock vib batt menu mute RCL STO CLR TALK FCN END tuv jkl mno wxyz pqrs ghi def opr abc Digital 07/07/98 Slim Battery with Battery Cover Extra Capacity Battery with Battery Cover Sprint PCS Phone Auxiliary Battery with Battery Cover 12
  13. 13. Confidential Define Management ! Install, Update, Disable, Wipe Applications and Data ! Dynamically Configurable Policies ! Enforce security best practices • Application access control • Data access control 13 Internet (WiFi) and/or Mobile Network (3G) Horizon Server User. Directory Admin Browser User Browser iOS Handset Workspace iOS Handset Workspace Android Handset Workspace Android Handset Workspace
  14. 14. Confidential Define Security !Confidentiality • Ensuring that information is accessible only to those authorized to have access. !Integrity • The assurance that data is identically maintained during any operation (such as transfer, storage, retrieval or display). !Availability • A measure of the degree of a system which is in the operable and committable state at the start of mission when the mission is called for at an unknown random point in time. 99.999% Confidentiality AvailabilityIntegrity 14
  15. 15. Confidential Threat Modeling ! Security is not black and white ! Security is a is a journey, not a destination ! No amount of virtualization will prevent the “purchase key” attack or the “rubber hose” attack … Do Nothing Lazy Isolation Application Bubble Hosted Hypervisor Bare Metal Hypervisor Mechanical Isolation Shielded Tent with Armed Guards Real-Time Twitter Feed 15
  16. 16. Confidential Horizon Mobile for Android ! A Hosted Hypervisor • VMware Workstation for Android + Remote Management Agent 16 ARMv7-A based SoC Linux 2.6.35+ Kernel Android Applications and Middleware MVP Virtual Machine Support Services VVP Android Applications and Middleware MVP Virtual Machine Monitor MVPkm MVP User Interface Proxy VVP Linux 2.6.35 Kernel HMMApp.&Agent
  17. 17. Confidential Android Attack Surfaces ! User Interface • Display • HID • Audio I/O ! Data at rest • Internal Flash • microSD card ! Data in use • DRAM • Cut/Copy/Paste • IPC • Content Providers ! Data in motion • 3rd Party Android VPN clients 17 Managed Workspace User Interface DatainMotion DatainUse Data at Rest
  18. 18. Confidential Horizon Mobile for iOS Technology Preview ! Application Virtualization • VMware ThinApp for iOS + Remote Management Agent 18 Apple Frameworks shellac Wrapped Application libsystem borerlibsyst em
  19. 19. Confidential iOS Attack Surfaces ! User Interface • Display • HID • Audio I/O ! Data at rest • Internal Flash • iTunes + iCloud Sync/Backup ! Data in use • DRAM • Cut/Copy/Paste • Data Sharing ! Data in motion • AppTunnel (Secure HTTP Proxy) 19 Managed Workspace User Interface DatainMotion DatainUse Data at Rest
  20. 20. Confidential Questions? 20
  21. 21. Confidential What you missed… ! EUC 1822: VMware Horizon Mobile: Mobility within the Enterprise • Courtney Skey, Sr. Product Marketing Manager, VMware, Inc. • Hoofar Razavi, Director Product Marketing, VMware, Inc. ! SPO 3416 - Managing and Protecting Employee’s Mobile Devices • Ken Daniels, Sr. Director, Samsung ! Stay informed! • www.twitter.com/vmwaremobile • www.facebook.com/vmwaremobile • www.youtube.com/vmwaretv 21

×