19 Oct 2011
LAS VEGAS: The emergence of mobile platforms has afforded security firms and OS developers a chance to succeed where desktop security systems have failed, said McAfee.
Speaking to reporters at the company's Focus conference in Las Vegas, McAfee senior director of mobile security John Dasher said that as new mobile operating systems are emerging, developers have the chance to build stronger protections into their platforms.
"If you think about it, there has never been a class of software with more attention paid to security," Dasher said.
"Security has been designed into them from the ground up."
Though mobile platforms have the potential to be more robust than desktop platforms, they raise a number of new challenges.
Dasher noted that many users neglect to properly consider the consequences of providing access to personal information to untrusted applications. Additionally, platforms such as Android which provide open application services can fall prey to rogue and malware-laden app submissions.
Ultimately, however, Dasher is optimistic that both developers and users will make mobile platforms more secure than their desktop counterparts, in large part because of the stronger tie many users have with their handsets and tablets.
Dasher explained that unlike work machines which contain company data, personal devices contain data such as family pictures and contact information. As a result, end users have a greater personal stake in keeping their devices secure.
"User education has always been a big problem for security," Dasher said.
"The companies that have successful security postures are the ones that get end users to be less of the problem and more the solution."
Latest stories from Security
Related videos
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
V3 examines the key strengths and weaknesses of Samsung's latest iPhone killer
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Java, J2EE Agile Senior Developer, Warrington, Cheshire...
Location: Geneva Client: A well established world...
Location: Geneva Client : A well known company Job...
Location: Lausanne Client: A well established world...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Security still lagging behind
This article seems to suggest that mobile development could represent a ‘sea change’ in developers attitude to security. Although this would be nice, the reality doesn’t seem to reflect it. We’ve already seen the challenges with the Android platform, with DroidDream and other malware-ridden apps being distributed via the Android marketplace. There is a lack of scrutiny around mobile apps, which are often outside of the traditional SDLC – produced by marketing/external agencies/etc... and therefore missing critical controls. Also the traditional approach of pen testing doesn’t work here as the necessary trained individuals don’t exist. The mobile device represents a convergence of business/personal information and there is real value to the information they hold – however the security is lagging far behind what we should reasonably expect.
Posted by: Matt Peachey, Veracode 21 Oct 2011