Smartphone security
Dr. Osama Al Sayaydeh
Cyber security department
Number of mobile phone users across
the world
The estimated number of mobile devices is around 5.8 billion,, which is thought to have grown
exponentially within five years and is supposed to reach nearly 12 billion within four years. Hence,, it
will be an average of two mobile devices per person on the planet.
What is Mobile security
• Mobile Security as a concept deals with the protection of our mobile
devices from possible attacks by other mobile devices, or the
wirelesses environment that the device is connected to.
Why is Mobile Device Security
important ?
Because the mobile phone contains
our private data.
Why is Mobile Device Security
important ?
• With more than half of business PCs now mobile, portable devices present
distinct challenges to network security, which must account for all of the
locations and uses that employees require of the company network.
• Potential threats to devices include:
1. malicious mobile apps.
2. phishing scams.
3. data leakage. Spyware.
4. Unsecure Wi-Fi networks.
On top of that, enterprises have to account for the possibility of an employee
losing a mobile device or the device being stolen. To avoid a security breach,
companies should take clear, preventative steps to reduce the risk.
Smartphone
Smartphone definition :
• a mobile phone that performs
many of the functions of a
computer, typically having a
touchscreen interface, Internet
access, and an operating system
capable of running downloaded
apps.
Complex Ecosystem
- Core aspect: mobile apps
- Mobile apps are the “why” people find smartphones useful
- Apps give developers ways to make their work available
- There must be incentives for developers as well
Apple’s Strategy
- Apple’s iOS ecosystem is quite closed
- iOS is closed source
- iOS and iOS apps can only run on Apple devices
- You can install apps only from the Apple Store
- Tricky to “jailbreak” iOS devices
- How come are they still around?
- They were the first ~> significant chunk of market share
- They make great products, and people know about it
Google’s Strategy
• - Android Inc. started developing Android in 2003
- Google purchased them in 2005
• - Google needed to catch up
- The “Open Handset Alliance” (84 companies)
- Ecosystem is much more open
- Android / AOSP is open source https://source.android.com/
- Android can run on many different devices, even non-Google ones
- Easy to inspect Android apps / reverse them / modify them
- Easy to install apps you develop (“side loading”)
- Developers can do many more things
- Quite easy to “jailbreak” Android devices
Microsoft Strategy (?)
- Windows Phone launched in 2010
- It primarily aimed at the enterprise market
- Phones were actually quite nice, but developers didn’t
believe it could make it…
- ...not many apps out there ~> it eventually faded over
Android vs iOS recap
Android / iOS:
• Ecosystem: If you already have other Apple products, such as
a Mac or iPad, you may prefer to stick with iOS for better
integration.
• Hardware: Android devices are available in a wider range of
hardware configurations, so you can find a device that meets
your specific needs and budget. iOS devices, on the other
hand, tend to be more premium and expensive.
• Software updates: Android devices typically receive software
updates for a shorter period of time than iOS devices. This
means that if you want to stay up-to-date with the latest
features and security patches, you may want to consider an
iOS device.
Following are the major threats regarding
mobile security
• Loss of mobile device. This is a common issue that can put at risk not
only you but even your contacts by possible phishing.
• Application hacking or breaching. This is the second most important
issue. Many of us have downloaded and installed phone applications.
Some of them request extra access or privileges such as access to
your location, contact, browsing history for marketing purposes, but
on the other hand, the site provides access to other contacts too.
Other factors of concern are Trojans, viruses, etc.
• Smartphone theft is a common problem for owners of highly coveted
smartphones such as iPhone or Android devices. The danger of
corporate data, such as account credentials and access to email falling
into the hands of a tech thief is a threat.
