Thursday, March 5, 2015

Mobile security - A comparision

There is a nice article in InfoWorld comparing security aspects among the mobile OSs.
http://www.infoworld.com/article/2889365/mobile-security/mobile-security-ios-vs-android-vs-blackberry-vs-windows-phone.html?nsdr=true


  • IOS gaining in enterprise corporate apps
  • Google recently released Android for Work. 
    • Requires Andorid Lollipop OS. Older OS versions require Android for Work app installed
    • Partially addresses malware problem among Android apps
    • IT admins can prevent users from installing unapproved apps in the business workspace. IOS uses rigid sandboxing to keep apps from acessing other apps.
    • Encryption is not mandatory on Android devices, where as IOS devices have been encrypted by default for a while.

 Exchange ActiveSync (EAS) policy support compared




AppleGoogleSamsungBlackBerryMicrosoft
PolicyiOS 7, 8Android 4, 5Android 4 + SAFEBlackBerry 10Windows Phone 8, 8.1
Allow device encryptionYesYesYesYesYes
Require device encryptionYesYes***MDMYesYes
Encrypt storage cardNAYesYesNoYes
Minimum password lengthYesYesYesYesYes
Minimum number of complex characters (password)YesYesYesYesYes
Password historyYesYesYesYesYes
Device wipe thresholdYesYesYesYesYes
Disable removable storageMDMNoMDMNo*No
Disable cameraYesYesYesNo*No
Disable SMS text messagingNoNoNoNoNo
Disable Wi-FiMDMNoMDMNoYes**
Disable BluetoothMDMNoMDMNo*No
Disable IrDANANoNoNoNo
Require manual sync while roamingYesNoYesNo*No
Allow Internet sharing from deviceMDMNoMDMNo*MDM
Allow desktop sharing from deviceMDMNoMDMNoNo
Disable email attachment accessYesMDMYesNoYes
Disable POP3/IMAP4 emailMDMNoNoYesNo
Allow consumer emailNoNoNoNoNo
Allow browserYesMDMMDMNoMDM
Configure message formats (HTML or plain text)NoNoNoNoNo
Include past email items (days)YesNoNoYesYes
Email body truncation size (KB)NoNoNoNoYes**
HTML email body truncation size (KB)NoNoNoNoYes**
Include past calendar items (days)NoNoNoYesNo
Require signed S/MIME messagesYesNoNoNoYes**
Require encrypted S/MIME messagesYesNoNoNoYes**
Require signed S/MIME algorithmYesNoNoNoYes**
Require encrypted S/MIME algorithmYesNoNoNoYes**
Allow S/MIME encrypted algorithm negotiationYesNoNoNoYes**
Allow S/MIME soft certsNoNoNoNoYes**

No comments:

Post a Comment