Comments
A Peek Inside Enterprise BYOD App Security Policies
Newest First  |  Oldest First  |  Threaded View
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
User Rank: Strategist
6/4/2014 | 7:33:06 AM
Re: A Peek Inside Enterprise BYOD App Security Policies, by Kelly Jackson Higgins
It was interesting to see the data on the breakdown and types of apps IT is pushing to users' mobile devices. And it was promising to see that some really are starting to protect corporate data access. IBM's Dale said he was surprised to see Cisco AnyConnect show up as a popular public app, mainly because there are ways to streamline the VPN connection within apps. I thought it seemed promising to have IT pushing a VPN app.
James ArnoldW608
50%
50%
James ArnoldW608,
User Rank: Apprentice
6/3/2014 | 5:50:15 PM
A Peek Inside Enterprise BYOD App Security Policies, by Kelly Jackson Higgins
A very good analysis of the security challenge with BYOD.  Imagine "one" piece of data going  through such a multitude of authentication and verification procedures, without being altered in some way.  http://www.darkreading.com/endpoint/a-peek-inside-enterprise-byod-app-security-policies/d/d-id/1269404?_mc=sm_dr


Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
DevOps’ Impact on Application Security
DevOps’ Impact on Application Security
Managing the interdependency between software and infrastructure is a thorny challenge. Often, it’s a “developers are from Mars, systems engineers are from Venus” situation.
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7392
Published: 2014-07-22
Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/.

CVE-2014-2385
Published: 2014-07-22
Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the (1) newListList:ExcludeFileOnExpression, (2) newListList:ExcludeFilesystems, or (3) newListList:ExcludeMountPaths parameter t...

CVE-2014-4326
Published: 2014-07-22
Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

CVE-2014-4511
Published: 2014-07-22
Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/.

CVE-2014-4911
Published: 2014-07-22
The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Where do information security startups come from? More important, how can I tell a good one from a flash in the pan? Learn how to separate ITSec wheat from chaff in this episode.