What Is Mobile Code?

We consider the situation where an attacker is already in possession of the smartphone. This scenario is common because the user might forget her smartphone somewhere, i.e., in her office, canteen, etc., or an attacker manages to steal the smartphone (e.g., through pickpocketing, etc). More specifically, we target three scenarios: (i) an attacker accidentally finds the smartphone, (ii) the attacker is victim's friend or colleague (who knows about the implemented mechanism), and (iii) an attacker who tries to mimic the user behaviors (e.g., using recorded video, etc) to unlock the victim's smartphone.

HOW TO PREVENT “IMPROPER PLATFORM USAGE”: Use of secure coding plus configuration on mobile application servers. ( OWASP, 2017)

This article gives a synopsis of threats to the mobile devices and the data existing in them and the available defenses. It classifies seven different types of threats on mobile devices and then it discusses about the precautions that can be taken to avoid these threats. It recommends how to prioritize the different threats and defenses.

However mobile devices also represent a significant risk to information security and data security as, if the appropriate security applications and procedures are not applied, they can be a conduit for unauthorized access to the Eastern Widgets’ data and IT infrastructure. This can subsequently lead to data leakage and system infection. Eastern Widgets has a requirement to protect its information assets in order to safeguard its customers, intellectual property and reputation. This policy outlines a set of practices and requirements for the safe use of mobile devices.

The authors have organized the article very logically by giving a series of problems that link together can make the smartphone insecure by giving the examples of outside sources: operating system security issues of L. Xing et al., “Unauthorized Cross-App Resource Access on MAC OSX and iOS,”, memory corruption attacks of E. Schwartz et al., “Q: Exploit Hardening Made Easy,”, etc. These logical series can build stronger relationships to the ethos and pathos to make their writing more effective.

The article, which addresses security loopholes in modern computing environments, by Loscocco et al highlights what is and has been being done security wise in the past and how secure these implementations were and going forward what should be done to ensure in depth security which guarantees system wide security (1998). The article first explains features of secure operating system and why current systems implemented under the notion of application space security ultimately failed to safe guard the integrity and confidentiality of our assets. The article then continued with general examples of access control and cryptography implemented in the application space with no or little support from operating system and showed their vulnerabilities to attacks such as tampering, bypassing and spoofing. The article supplied real-life examples to support the evidence that building security in the application space without secure operating system is meaningless. The article raised concrete examples on mobile code security, Kerberos network authentication service, IPSEC and SSL network security protocols and firewall. The paper finally put an interesting remark that security implemented in application space without secure operating system is like “building a house in a pile of sand” and it also emphasized that secure operating system without better security on the

When it comes to security, most mobile devices are a target waiting to be attacked.

Mobile computing is important to Google, Apple, and Facebook, mainly because the widespread use of smartphones and other mobile platforms has increased tremendously. Pretty soon, it is believed that

Today’s technology-based society is plagued with an over abundance of mobile devices. These devices now control our homes, our transportation, and our

Computer viruses are minute program which is “embedded inside an application or within a data file which can copy itself into another program“(Adams et al, 2008 ) for the sole determination of meddling with normal computer operations. The consequences may range from corruption and deletion of data; propagation of virus on to network and deployment through attachments through emails in order to further creating havoc to all associated computing devices.

Lawton, G. (2008). Is it finally time to worry about mobile malware? Computer, 41(5), 12-14.

Phones hold critical information such as: addresses, phone numbers, pictures, account information and much more. Mobile phones are considered high risk when it comes to information leakage. According to Forbes , Six of the worlds seven billion people have mobile phones with access to the internet. Cyber attacks can happen at any time and any place, even from the comfort of your own home. Malware, (which is a software that is intended to damage or disable computer systems) is now an easy detection for most computer security

Most of the malware that infects mobile devices are delivered through bogus e-mail messages that are sent to the user. Once the link is clicked, the malware is then installed and can either steal information from the user, or some can even take over components of the Smartphone itself. Various security reports state that mobile malware has been on the rise over the past year and that it has been multiplying at a faster rate now than any other time in the last four years.

Thesis; Along with the efficiency mobile devices render, come along its risks, in which raises substantial security and privacy concerns. It’s important to be aware of the possible threats a mobile can have, along with knowing what and how to secure information, as well as trying to prevent threats from happening.

According to the U.S. Department of Homeland Security in the article Cyber Threats to Mobile Phones, phones are now sharing hardware and software similar to a PC and becoming each time more like a PC. Therefore, the risks of being hacked are increasing, allowing hackers to attack mobile devices the same way as if they were doing it with a regular PC. Personal and professional information are more often stored on mobile devices therefore it is imperative to have our data secure. Security solutions for mobile devices are not as broad or high-tech as those for PCs. The majority of mobile security relies on the proper use and smart choices that the user makes on a daily basis to be protected against cyber attacks. Even the most careful person can be attacked but the possibilities of that happening are less when you are proactive.