3.5 Implement secure mobile solutions Flashcards
Mobile device mgt: what is MDM ?
Mobile Device Management is used to centralized management of the mobile devices
Mobile device mgt: why MDM is important ?
For security (data, network)
Mobile device mgt: what is BYOD in MDM ?
Bring Your Own Device
Mobile device mgt: how MDM ensure devices are protected ?
By setting up policies on apps, data, camera etc. The admin can control the remote device and manages access control (force scren locks & PIN on a device)
Mobile device mgt: what can you manage if you use an MDM ?
- Application mgt
- Content mgt
- Remote wipe
- Geolocation
- Geofencing
- Screen lock
- Push notification services
- Passwords & PIN (reset)
- Biometrics (type, allow/ disallow)
- Context-aware authentication
- Containerization
- FDE
Mobile device mgt: why is content mgt is important ?
It aims at secure access to data and protect them from outsiders.
Ex: restrict file sharing and viewing, set up DLP, encrypt data
Mobile device mgt: what is remote wipe functionnality ?
Remove all data from a mobile device (in case of lost/stolen for ex)
Mobile device mgt: what is geofencing ?
Restrict or allow features when the device is in a particular area (for ex camera, auth
Mobile device mgt: what is push notification services and why is included in MDM?
Notification that appears on the mobile device screen.
Notification display can be controlled in the MDM
Mobile device mgt: what is context-aware authentication?
Combine multiple contexts (IP location, GPS location etc) to know if it’s really you trying to auth or if it’s a hacker
Mobile device mgt: what is containerization in MDM ?
Create separate partitions to keep private information in one partition and company information in another
Mobile device mgt: what is FDE in MDM and what is the problem w/ FDE?
Full Device Encryption
It use a lot of CPU cycles + complex integration between hardware and software
Mobile device security: what is a HSM?
Hardware Security Module provides cryptographic features for computer and mobile devices (in a microSD HSM)
Mobile device security: what does a microSD HSM (& HSM) provide?
Security services & secure storage:
- Encryption
- Key generation
- Digital signatures
- Authentication
- Protect private keys
- Cryptocurrency storage
Mobile device security: what is a UEM ?
Unified Endpoint Management is an evolution of MDM allowing the users to use different types of devices
Ex: application can be used across != platforms