Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Thursday, March 5, 2015

Mobile security - A comparision

There is a nice article in InfoWorld comparing security aspects among the mobile OSs.
http://www.infoworld.com/article/2889365/mobile-security/mobile-security-ios-vs-android-vs-blackberry-vs-windows-phone.html?nsdr=true


  • IOS gaining in enterprise corporate apps
  • Google recently released Android for Work. 
    • Requires Andorid Lollipop OS. Older OS versions require Android for Work app installed
    • Partially addresses malware problem among Android apps
    • IT admins can prevent users from installing unapproved apps in the business workspace. IOS uses rigid sandboxing to keep apps from acessing other apps.
    • Encryption is not mandatory on Android devices, where as IOS devices have been encrypted by default for a while.

 Exchange ActiveSync (EAS) policy support compared




AppleGoogleSamsungBlackBerryMicrosoft
PolicyiOS 7, 8Android 4, 5Android 4 + SAFEBlackBerry 10Windows Phone 8, 8.1
Allow device encryptionYesYesYesYesYes
Require device encryptionYesYes***MDMYesYes
Encrypt storage cardNAYesYesNoYes
Minimum password lengthYesYesYesYesYes
Minimum number of complex characters (password)YesYesYesYesYes
Password historyYesYesYesYesYes
Device wipe thresholdYesYesYesYesYes
Disable removable storageMDMNoMDMNo*No
Disable cameraYesYesYesNo*No
Disable SMS text messagingNoNoNoNoNo
Disable Wi-FiMDMNoMDMNoYes**
Disable BluetoothMDMNoMDMNo*No
Disable IrDANANoNoNoNo
Require manual sync while roamingYesNoYesNo*No
Allow Internet sharing from deviceMDMNoMDMNo*MDM
Allow desktop sharing from deviceMDMNoMDMNoNo
Disable email attachment accessYesMDMYesNoYes
Disable POP3/IMAP4 emailMDMNoNoYesNo
Allow consumer emailNoNoNoNoNo
Allow browserYesMDMMDMNoMDM
Configure message formats (HTML or plain text)NoNoNoNoNo
Include past email items (days)YesNoNoYesYes
Email body truncation size (KB)NoNoNoNoYes**
HTML email body truncation size (KB)NoNoNoNoYes**
Include past calendar items (days)NoNoNoYesNo
Require signed S/MIME messagesYesNoNoNoYes**
Require encrypted S/MIME messagesYesNoNoNoYes**
Require signed S/MIME algorithmYesNoNoNoYes**
Require encrypted S/MIME algorithmYesNoNoNoYes**
Allow S/MIME encrypted algorithm negotiationYesNoNoNoYes**
Allow S/MIME soft certsNoNoNoNoYes**

Tuesday, March 3, 2015

Google makes full-disk encryption optional for Android devices

Earlier Google had announced that devices shipping with Lollipop pre-installed would have encryption as "out of the box" option.Nexus 6 smartphone and Nexus 9 tablet are shipping with encryption activated. However recently announced Lollipop devices such as Mot E and Samsung Galaxy S6 aren't being fully encrypted automatically. There have been performance concerns regarding enabling full-disk encryption as noted in reviews of  Nexus 5 devices.

Friday, February 13, 2015

Outlook iOS/Android App security concerns

Newly released Microsoft Outlook App is completely bypassing Exchange ActiveSync security policies, according to security firm Rapid 7.
"Any ActiveSync policy defined on the server is completely ignored," wrote Sigurdson in a post on the security firm's Web site. "Your company can define a sophisticated passcode or encryption policy that will have absolutely no impact on devices if this new e-mail client is used by your employees."

Thursday, February 12, 2015