1. The enemy in your pocket
Securing smartphones in the enterprise
Vicente Diaz, Senior Security Analyst, GReAT
Gartner Symposium/ITxpo 2012, Barcelona
PAGE 1 |

2. BYOD will come regardless you have a
policy or not
Human behavior has shifted, BYOD is a
response to that
My CEO heard we can save money
through BYOD
PAGE 2 |

3. PAGE 3 |

4. 1. The problem
PAGE 4 |

5. BYOD reanalyzed
Where?
What devices?
PAGE 5 | 1 2

6. What´s the problem?
Problem 1: Infection
PAGE 6 | 1 2

7. Can this happen?
PAGE 7 | 1 2

8. What are we really afraid of?
PAGE 8 | 1 2

9. Bad PR is worse than bad IT
PAGE 9 | 1 2

10. What´s new then?
PAGE 10 | 1 2

11. Are they vulnerable?
! Highlights from 2012:
! NFC Vulnerability by Charlie Miller
! iPhone 4S and Samsung Galaxy S3 owned
PAGE 11 | 1 2

12. Do you like chocolates?
PAGE 12 | 1 2

13. Who else wants to spy on you?
PAGE 13 | 1 2

14. FinSpy
PAGE 14 | 1 2

15. Protection
Sure, I have swipe gesture password
PAGE 15 | 1 2

16. PAGE 16 | 1 2

17. BYOD ≠ Data Leak
PAGE 17 | 1 2

18. 2. Perspective
PAGE 18 | 1 2

19. Perspective
PAGE 19 | 1 2

20. Perspective
PAGE 20 | 1 2

21. PAGE 21 | 1 2

22. Perspective
PAGE 22 | 1 2

23. Abusing Consumerization - Mobile devices
Are they dangerous?
It depends on what you do with it!
Facebook
Twitter
Gmail
Corporate e-mail
Reading corporate documents
Writing confidential e-mails?
PAGE 23 | 1 2

24. Where is the data?
PAGE 24 | 1 2

25. Demo
PAGE 25 | 1 2

26. Using the cloud
PAGE 26 | 1 2

27. Some tools
PAGE 27 | 1 2

28. 3. What now?
PAGE 28 | 1 2

29. Kim Stevenson
PAGE 29 | 1 2

30. Reality for most companies is different
PAGE 30 | 1 2

31. Reality for most companies is different
PAGE 31 | 1 2

32. Conclusions
! BYOD: Myth vs Reality
! Policies are necessary, but they are not enough
! Is the problem in the device or in educating users?
! Who is responsible for the security of the device?
! We all love chocolates!
PAGE 32 | 1 2

33. Thank You
Questions?
Vicente Diaz, Senior Security Researcher, Global Research and Analysis Team
@trompi
vicente.diaz@kaspersky.com
PAGE 33 |