Mobile device security implementation and wireless vulnerability threats

Mobile Device Security

Factors and Implementation of Mobile Device Security

Mobile devices have become ubiquitous and its usage is only going up from here. With such an extensive usage of mobile devices for personal and business use, its security becomes an important question. Most devices ado not have the security mechanism in place in the case of a theft, loss or intentional breach of the network and this makes the data present it in extremely vulnerable. This paper examines the importance of mobile security and how it can be implemented for greater protection.

Wireless technology has undergone tremendous improvements in the last few years. The capacity and performance have increased multifold and today, the amount of applications and services that can be accessed through the mobile device is staggering. Many different media can be stored and retrieved easily and more importantly, these can be uploaded and downloaded from the internet within minutes. All these functionality have led to an increased need for security because there is a high chance for the data and network to be compromised. Security has to be implemented at different levels to ensure that users have access to all the functionality and information without ever having to worry about rogue hackers and network vulnerabilities.

The Modern Mobile Devices -- Tablets and Cellphones

There has been an explosion in the usage of tablets and cellphones as users are increasingly turning to them for personal and business use. The number of users accessing these devices have been increasing worldwide, thanks to the presence of multiple wireless providers and improved networks.

There are four main kinds of wireless connectivity and they are Wireless Wide Area Network (WWAN) used by GSM and 3G phones, Wireless Metropolitan Area Network (WMAN) used by suburban households and businesses, Wireless local area network (WLAN) used within a floor to connect all workstations and computers and Wireless Personal Area Network (WPAN) used by bluetooth and infrared devices (Urbas & Krone, 2006). Each of these connectivity pose challenges in terms of security identification and implementation and service providers are constantly working on ways to enhance the security of these devices.

BYOD and security risks

Bring Your Own Device (BYOD) is a trend followed by many employees. They bring their own personal mobile phones and tablets to workplace and access company email and confidential information through it. One of the primary drawback of BYOD is the increased vulnerability and data breaches that can occur when confidential information is accessed through public networks. Most 3G and mobile phone networks are unsecured and can be hacked into easily and this is one of the biggest problems facing corporate security specialists today.

User Behavior

The number of wireless access spots also known as hotspots are increasing around the world to give people more connectivity. They are available in airports, hotels, coffee shops, libraries and other public places to appeal to people to come to their businesses. Unfortunately, these public networks have also increased the security vulnerabilities leading to more viruses and hackers.

This is partly due to the lack of security measures implemented in these networks. A survey shows that 60% of the public networks had little to no security and they did not use any form of encryption (Chenoweth, Minch and Tabor, 2010). So, the responsibility is on the user to protect their information and safeguard it from malicious intruders.

Solution

Due to the high-level of vulnerability of mobile device, numerous measures should be used in tandem to avoid security-related problems. One option is to enforce laws to prosecute those who access the wireless networks. Though it can be effective to some extent, its enforcement becomes difficult. Wireless networks give hackers a good measure of anonymity and it makes it tough to identify the individual, prove the charges and prosecute him or her. So, these laws can deter the novice hackers to some extent, but can be ineffective against experienced and professional hackers.

Other approaches include tackling this problem with appropriate software and avoiding threats by the use of common sense and some simple usage practices.

Software

Many different kinds of software can be used to prevent or limit attacks on mobile devices and some of them are:

Intrusion Prevention Software - This software will examine all the data that comes through mobile phones and will warn the users if any unauthorized app is looking to access information.

Anti-virus software -- Though most people are skeptical about anti-virus software for mobile devices, it can nevertheless provide a fair measure of protection. Advanced anti-virus software is being developed and this can prove beneficial in the future.

Bluetooth - This technology uses short-range radio signals to transmit information. The advantage with this technology is that it is fast and robust. It is more secure than long-distance wireless networks because they are allotted a unique 48-bit device address and the users can communicate only in one hop range (Choi, Kim, Park, Kang & Eom, 2004). So, the chances for hackers to get into the network is slim.

Avoiding security threats

The first step towards avoiding security threat is to educate users on the security issues and the possible sources through which outsiders can access the users' information. For example, there are some ports in Windows operating system that are open and allow file and printer sharing. Outsiders can send malicious files to the computer through these ports when the device is connected to a public wireless network (Chenoweth, Minch and Tabor, 2010). Also, users should understand the threats to confidential corporate information when they use BYOD option or access work-related devices through a wireless network.

There are some simple techniques that users can implement for better protection and they are:

Identify the right device -- Some devices have better security options than others and so, its important users take some time to research these security options. This is especially important if they plan to use it for business too.

Encryption and password -- The first line of defense against a security threat is the use of passwords and encryption. This can keep the casual outsiders from accessing the information on your device. These passwords also help in the case of a lost phone because it is not easy for an outsider to break the code and get information.

Involve the IT security staff -- If a mobile device is used for work, then its important to involve the IT security staff and give them remote access to wipe off confidential data in the event of an attack or loss of the phone.

Limiting the use of unauthorized apps -- There are thousands of apps for smartphones today and some of these apps come from companies whose main intent is to hack into the device. So, its a good idea to limit the use of apps, especially those that come from unauthorized companies.

Firewall -- Setting up firewalls can limit the amount of information that can be accessed through a mobile phone. Users access only some data from their phones such as emails and so, the rest of the information can be protected by setting-up firewalls.

A combination of user behavior and the right software is expected to reduce the security problems associated with mobile devices and its important that these measures are implemented as soon as possible to reduce the number of unauthorized users and hackers.

Conclusion

In short, mobile devices have changed the way we communicate, view information and transact business. This technology has a big impact on our current lifestyle and unfortunately, along with it comes problems related to security. Unauthorized users can easily hack into the network or device and steal confidential information. To prevent this from happening, a set of measures are outlines above and its implementation is expected to reduce the vulnerability of these devices.