Poison BlackBerry Devices in the Cloud

A new era of computing is at hand, and botnet herders and malware writers of the world are ready to pounce. Too few users are taking notice, even though security warnings surrounding wireless and mobile technology and cloud services are on the rise.

By Bill Brenner
Wed, October 07, 2009

CSO — We've been writing a lot about security threats against cloud services and mobile devices of late, not because the threats are new, but because a lot of apathy abounds.

The latest headline comes by way of Dhillon Andrew Kannabhiran, host and organizer of the Hack In The Box (HITB) security conference in Kuala Lumpur, Malaysia. In an interview with Dan Nystedt of the IDG News Service, he warned that a new era of computing is at hand and that botnet herders and malware writers of the world are ready to pounce. [See: Hackers Plan to Clobber the Cloud, Spy on BlackBerries.]

"The focus [of security] is definitely moving towards 'the cloud' and to the security of embedded devices (Android, iPhone) to more advanced client-side attacks which leverage on Web 2.0 technologies, such as attacks on Facebook, Twitter and other popular sites," he said.

He's right, and too few users are taking notice.

Security warnings surrounding wireless and mobile technology and cloud services have been repeated frequently in the last couple years. But up until recently, the types of attacks experts described have been theoretical. One of the more popular debates surrounding what could be centered around whether President Obama should be forced to relinquish his BlackBerry in the name of national security.

FOR A LOOK BACK AT THE OBAMA/BLACKBERRY DEBATE, SEE:

* Opinion: Obama's BlackBerry No Security Threat

* West Wing BlackBerry Security: Possible or Pipe Dream?

* Obama's BlackBerry Prompts Interest in Mobile Voice Encryption

* Podcast: Former Bush Deputy Chief of Staff Joe Hagin on Why Mobile Tech is GOOD for West Wing Security

There have only been sporadic reports of attacks against BlackBerry or iPhone devices. As for the cloud, many of those who use cloud services still have little understanding of what they're dealing with.

FOR MORE ON CLOUD SECURITY, SEE OUR ONGOING SERIES:

* 5 Mistakes a Security Vendor Made in the Cloud

* Defining Cloud Security: Six Perspectives

* Cloud Security: Danger (and Opportunity) Ahead

* Cloud Security: Time to Smoke Another One?

* Podcast: Why IT Security Pros Have Their Heads in the Clouds

* Forrester: A Close Look At Cloud Computing Security Issues

* Winkler: The Real Problems With Cloud Computing

But the fact of the matter is that most of us now have a BlackBerry or iPhone, and we're not afraid to use them. We're also increasingly dependent on cloud-based services. I admit I can't live without my BlackBerry nearby, and I rely on quite a few Google apps. Neither was the case for me just a couple years ago. My 8-year-old son recently asked, in all seriousness, if I check my Blackberry during a shower.

Continue Reading

This whitepaper offers a detailed look into the fundamentals of HP NonStop SQL solutions. See how this system delivers unprecedented levels of application availability with fail-safe data integrity and meets the needs of enterprises with large-scale business critical applications.
Learn how your answer to this question compares to your peers by taking this quick poll. See how your peers are dealing with the challenge of ensuring a highly capable server infrastructure as technological shifts impact the application server platform.
With increasing data growth, comes increased need for data security.  The existing DLP model, with a focus on compliance/enforcement is not sufficient as the data discovery and classification capabilities are not granular enough.  Read this paper to find how you can efficiently and accurately manage your risk by rapidly inventorying and classifying your data and then developing remediation workflows that support business needs. 
This paper breaks down attack sources into four categories: external, malicious insiders, accidental insiders, and unknown.
The rapid growth of data and technology is creating challenges for organizations as this digital data is considered to be business communications and must be preserved according the same industry-specific regulations governing the retention and discovery of emails and more traditional forms of electronic communications. This paper examines the role that Data Loss Prevention ("DLP") technology can play in helping organizations address the challenges of locating information in response to electronic discovery.
This research, conducted by the Ponemon Institute, focuses on issues relating to the use of data protection solutions such as endpoint encryption and data loss prevention within the workplace.
As greater numbers of datacenter servers transition from the physical to the virtual world, the components of virtualization success come to the fore. What scores of organizations have discovered is that success is derived from an optimal pairing of the right software platform with the right hardware platform.
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
VMware recently announced VMware vFabric™ Data Director, a new database deployment and operations platform that enables enterprise IT organizations to offer database as a private cloud service. Built on top of VMware vSphere 5, vFabric Data Director enables IT organizations to ontrol database sprawl through automation and consistent policy enforcement and accelerate application development cycles with self-service database management. Attend this webcast to learn how vFabric Data Director can help you build database-as-a-service in your datacenter.
A simple, cost-effective disaster-recovery solution for virtual environments is high on the agenda for IT organizations as they virtualize more business-critical applications with VMware. VMware vCenter™ Site Recovery Manager-the market-leading disaster-recovery product-ensures the simplest and most reliable disaster protection for all virtualized applications. VMware vCenter Site Recovery Manager provides centralized management of recovery plans, enables nondisruptive testing and automates site-failover processes.
Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to expand disaster protection beyond their most critical applications, largely because they are uncertain whether the quality of the protection is really worth its cost. VMware vCenter™ Site Recovery Manager 5 is the market-leading disaster recovery product that addresses this situation for organizations of all kinds. It complements VMware vSphere to ensure the simplest and most reliable disaster protection for all virtualized applications.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Sponsored Links
Resource Center