Mobile Data Loss: Threats, Enterprise Risks, & Countermeasures
MobileIron research director Michael Raggo investigates mobile data loss vectors, auditing enterprise iOS and Android applications for credential leaks.
Summary
The Proliferation of Mobile Endpoints in Enterprises
With Bring Your Own Device (BYOD) policies widespread, corporate data increasingly resides on mobile devices outside traditional network firewalls.
Analyzing Mobile Data Leakage Vectors
Michael Raggo identifies recurring security weaknesses—including unencrypted local SQLite databases, insecure cloud backups, and aggressive third-party analytics SDKs.
Auditing Mobile Malware and Spyware Threats
Raggo examines commercial mobile spyware and repackaged malicious applications capable of capturing SMS messages, microphone audio, and geolocation.
Enterprise Mobile Defense and Containerization
The presentation details implementing Mobile Device Management (MDM), application sandboxing, and continuous app vetting pipelines.
Related talks
DragonJAR - Hacking y Seguridad Informática·1 hr 27 min
Details threat Intelligence in the Era of DevSecOps: Hunting on the Fly! Juan Dero and Andrés Pulido and evaluates key implications for security practitioners.
OWASP Foundation·31 min
Adrian Winckles
Adrian Winckles details Web Application Honeypot Threat Intelligence.
OWASP Foundation·19 min
Carlos Holguera · Sven Schleier
Carlos Holguera analyzes OWASP Flagship Projects: OWASP Mobile Security Testing Guide.