Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Infographic: Mobile Security Run Amok
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
2/10/2014 | 8:45:13 AM
Re: No Clue? The 45 percent-- encryption
The data point about encryption is kind of misleading. If 13 percent of respondents say they don't enforce encryption on mobile devices, that means 87 percent do. That seems to me like a pretty good statistic.
IMjustinkern
IMjustinkern,
User Rank: Strategist
2/7/2014 | 4:03:27 PM
Re: No Clue? The 45 percent
The encryption portion of this is the most astounding part to me ... We've had encryption for email for how long, but it seems too alien a process when the device is in the palm of our hand. Easy encryption on mobile devices lets people use their devices (that they're using anyway) and keeps IT managers from stabbing themselves in the eyes.
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
2/6/2014 | 8:04:20 AM
Re: dirty words
Paul -- Why do you think MDM is so underutilized? Cost, effectiveness, technology issues, users?
PaulS681
PaulS681,
User Rank: Apprentice
2/5/2014 | 8:23:09 PM
dirty words
MDM seems to be dirty words to IT. Mobile devices have been around for some time now and security is still a big issue. Companies adopt BYOD in some form but have no means to manage it correctly.
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
2/5/2014 | 1:43:57 PM
Re: Mobility fallout -- encryption
If 13 percent don't enforce encryption on mobile devices using my massive abilities in arithmetic, that means 87 percent of enterprises do enforce encryption. I guess that puts you in the majority, Li.  

 
Li Tan
Li Tan,
User Rank: Apprentice
2/4/2014 | 7:55:07 PM
Re: Mobility fallout -- encryption
Marilyn, this is not a suprise to me. People are eager to get email access, etc. working on their mobile device. As long as it works, they will not bother to enforce the security rules. I think the best approach for the enterprise would be configuring the system so that no unencrypted/unprotected access is allowed.
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
2/4/2014 | 11:57:18 AM
Mobility fallout -- encryption
Anyone surprised that 13 percent of respondents don't enforce encryption on mobile devices that contain enterprise data? 
PeteJW
PeteJW,
User Rank: Apprentice
2/4/2014 | 7:43:10 AM
Re: No Clue? The 45 percent
Hi Marilyn - Definitely a combination - What I personally consider key is having the management flexibility in  the tools and tech to not only ensure a policy is enforced, but actually deliver the flexibility needed to guide its development -- especially if policies start off too rigid/control-centric and are being ignored.
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
2/4/2014 | 6:35:53 AM
Re: No Clue? The 45 percent
Thanks, PeterJW. What are the  "techniques you've seen that are effective in controlling BYOD. Are you speaking of policies or technologies or a combination of the two. 
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
2/4/2014 | 6:33:00 AM
Re: No Clue? The 45 percent
"The installation process is rather tedious and time-consuming. Furthermore, I do doubt its effectiveness."

That's a killer assessment, especially from someone who is tech-savvy and not your typical end-user/employee. If a tough, unenforceable BYOD policy turns off even the "believers," then mobile security has truly run amok. There must be a better way.
Page 1 / 2   >   >>


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Improving Enterprise Cybersecurity With XDR
Enterprises are looking at eXtended Detection and Response technologies to improve their abilities to detect, and respond to, threats. While endpoint detection and response is not new to enterprise security, organizations have to improve network visibility, expand data collection and expand threat hunting capabilites if they want their XDR deployments to succeed. This issue of Tech Insights also includes: a market overview for XDR from Omdia, questions to ask before deploying XDR, and an XDR primer.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-4146
PUBLISHED: 2022-06-30
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3414. Reason: This candidate is a duplicate of CVE-2012-3414. Notes: All CVE users should reference CVE-2012-3414 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental u...
CVE-2013-4170
PUBLISHED: 2022-06-30
In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the `tagName` property of an `Ember.View` was inserted into such a string without being sanitized. This means that if an application assigns a view's `tagName` to ...
CVE-2021-41506
PUBLISHED: 2022-06-30
Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420, V4.02.R11.Nat.Onvif.20160422, V4.02.R11.7601.Nat.Onvif.20170424, V4.02.R11.Nat.Onvif.20170327, V4.02.R11.Nat.Onvif.20161205, V4.02.R...
CVE-2022-1852
PUBLISHED: 2022-06-30
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.
CVE-2022-2078
PUBLISHED: 2022-06-30
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.