A Free Educational Resource Created by Carnegie Mellon University to Empower You to Secure Your Part of Cyberspace

Going Mobile Is Not Without Security Risks

Be sure to protect your best office pal with mobile security software.

Mobile devices, such as PDAsand smartphones (including Blackberry, Android and iPhone devices), are increasingly popular for both the business community and personal users due to the easy, fast access to the Internet they provide, their small size and portability, and their desktop-like user interface. Many offer bundled features, such as GPS, Bluetooth and a camera, and numerous applications. This "must-have" technology is becoming the ideal compact personal computer that can be carried in a pocket. However, as mobility rises in popularity, it brings security risks from the desktop domain to the mobile device domain.

The first known mobile phone malware was created in 2005 when a worm, called Cabir, infected mobile devices using a Symbian operating system. Mobile devices that have Internet access are exposed to the threat of downloading viruses, worms and other malicious software, in a similar manner as desktop machines, because users generally download photos, video clips, ring tones or other programs that could carry these threats. Furthermore, mobile devices with email access are subject to malware that is spread and downloaded through email. Blackberry, Android and iPhone devices are all at risk to viruses and other malware.

Another medium for the spread of malware is Bluetooth. Bluetooth is a wireless protocol for exchanging data over short distances from one mobile device to another and to any other device on the network, like a computer or printer. If in "discovery" mode, a Bluetooth-enabled mobile device can be detected by mobile devices within a 30-foot distance and can be easily infected by viruses these other devices may be carrying.

Mobile applications are another medium that can spread malware. Smartphones allow us to download applications that are highly useful and games that provide entertainment. But sometimes these types of applications are created maliciously to harm the phone or steal information from it.

Mobile Phone Best Practices

Use trusted Web sites. Download content from trusted Web sites only.

Avoid clicking on strange attachments. While accessing email from a mobile devices, do not click on suspicious or unknown attachments or links because they may contain malware. Also, clicking on unknown links may lead to phishing attacks.

Use Bluetooth with caution. When you are not using Bluetooth, turn it off. If you are using Bluetooth then make sure that it is in "non-discoverable" or "hidden" mode by changing the settings of your mobile device. Read the manual for your specific mobile handset for doing this task.

Turn off wireless features, such as GPS and WiFi, when not in use. When you are not using GPS or WiFi, it is advisable to turn them off to make sure that malicious entities and rogue applications are not able to take advantage of these features.

Install anti-virus software on your devices. A number of companies such as Symantec offer anti-virus software for mobile devices. Refer to the links below.

Do not "jailbreak" your mobile device. Most of the smartphones in the market can be jailbroken, which means you hack into your own device and make changes that allow it to perform advanced tasks and access features that would normally not be available to it. But, this also poses a very high security risk, as access would then be available to other mobile applications.

Only install mobile applications from trusted sources. Check with the vendor of your device for reliable sources for mobile applications. For example the iPhone App Store and Android Market are availabe on iPhone and Android devices respectively. Furthermore, before downloading an application from these sources, read the customer ratings and critical reviews of these applications.

Regularly upgrade your mobile device. Upgrading with the latest software from the manufacturer is one of the most important steps for protection. These updates will usually contain fixes to some of the security problems that may have been present earlier.

Install privacy tools. Along with anti-virus tools, privacy tools can help to detect applications that may cause problems and will alert you in case it finds any application that is violating your privacy. Refer to the links below.

Some Anti-Virus Software for Mobile Devices

Some Privacy Tools

References

My home page