Mobile devices have become an important asset to businesses, providing “anywhere/anytime” access to their sites for both employees and customers. Unfortunately, these devices also present security challenges. IT professionals speak of “attack surfaces,” which essentially means a possible point of attack. With mobile devices, security often means reducing the possibility of access by unauthorized users, hardening the attack surface and providing multiple layers of defense. These methods are frequently employed through one or more of the following best practices.
- Anti-malware: As obvious as this may seem to some, many mobile devices are in use that have no anti-malware software installed. Traditional operating systems, such as Linux and Windows, have been targeted for years, but it is only within the last few years that Android and iOS phones have been targeted in high numbers. An infected mobile device that is also used for work can wreak havoc if the malware “jumps fences” and penetrates the work apps.
- Multiple Authentication: Many users have never taken the first step toward securing their mobile devices — requiring passwords to access important apps. Beyond that, older devices can support the use of authentication tokens, while newer models may support biometrics, such as facial recognition or fingerprints, to restrict access to only authorized users.
- Separate Mobile Gateways: Funneling mobile traffic through a secured, separate gateway allows the use of additional security controls. For example, additional tools to prevent data loss, protocols, customized firewalls and filters can provide enhanced security. Another benefit is the ability to prevent critical assets from being accessed on a mobile device without altering the employee’s ability to access the same assets from a computer on your premises.
- Security Audits: Every enterprise should invest in a reputable testing firm to conduct annual audits on mobile security and test for penetration. These firms typically know what threats are currently circulating around the world, and they can help you address any issues found before the “bad guys” get around to you.
Mobility offers a great many advantages to your employees, vendors and customers. If you want to leverage the power of mobile devices, you should take appropriate measures to reduce your risks. At PhaseAlpha, we have extensive experience in reducing threat surfaces and mitigating risks for mobile devices. To learn more, give us a call at (913) 648-9200 or email us at info@phasealpha.com.