debashis banerjee mobile_webappintrosecurity
TRANSCRIPT
Debashis Banerjee ([email protected])
Who are they and how are they
changing our world?
Pic: Free Lib:
http://office.microsoft.com/en-us/images
Today’s Agenda
What is Mobile Web
What is Mobile App
Mobile Web and App Ecosystem
Inside the Mobile
Security in Mobile Web
Security in Mobile App
The Pyramid of Safety
What is Mobile Web and Apps
Mobile Web
Mobile Apps
Android
iOS
Windows Mobile
Phone User
Mobile Web And Mobile
App Ecosystem – The
Security Perspective
The Network
Physical Access (internal/third party)
App Developers
Web Developers
Web Servers
On Premise or Off Premise
Enterprise Security
Software
On Premise or Off Premise
Enterprise Security
Software
On device
phone
Security
Software
App Stores
Keyboard
Access
Battery
Power
Supply
Calender
Phone Book
Mail, SMS
Pictures
Or
Videos
Browser or
Native Apps
RF
(e.g.
GSM,CDMA)
SIM Cards
Speaker
Microphone
RAM
ROM OS
Wireless
6
Inside the Mobile
Security in Mobile web
Decide on Device Class
What is stored where? – cookies, passwords?
Encryption – Off and on wire, Data & meta data
Multi Factor Auth
Anti Virus
Intrusion Detection /Prevention
Web Threats …SQL Injection, Cross Site Forgery
Security in Mobile web - Continued
PCI DSS
Identity , Previlidge and Access
Sign in vs Sign off
Logical and Physical Security
Trusted/Untrusted Access/URLs
Impact of Non Standard OSs
Security in Mobile app
Security and Hosting Guidelines per app platform
Signed Apps
Marketplace security
App to desktop sync risks
Who reviewed the app?
Security Ratings
Install and Run previlidges of apps
Security in Mobile app - continued
Remote Clean
Access to areas of the phone
Second Factor Auth
Sandboxes
Physical Security
Security as a Service
Physical Security – device and server
Network and on device Security (anti virus
/Identity/Access/Privilege Management)
Browser Security/Web App Store Security
Web Site Security/App Security
Safe Internet
/App usage practices
11
The Pyramid of Safety
In Summary
Mobile Web and Apps are going to significantly
impact our browsing experiences
Know the ecosystem they work in
Security aspects
The pyramid of Safety
The changed world is here !!!!!
Pic: Free Lib:
http://office.microsoft.com/en-us/images