The danger of mobile viruses

The threat to corporate infrastructures posed by smartphones and PDAs should not be ignored, warns Robert Jaques.

Robert Jaques

The devastating damage that viruses can do to a network of PCs is well understood, and companies have long been protecting against the danger by implementing antivirus applications.

But the explosive and, in corporate terms, largely unmanaged growth of mobile computing threatens to undermine traditional virus protection.

Advertisement

The principal problem comes from the fact that PDAs and smartphones create backdoors into corporate infrastructures that can be exploited by viruses and malicious code to spread infections.

Rob Bamforth, practice leader at Bloor Research's Mobile and Wireless Practice, said that one of the principal security problems associated with mobile devices is that they are typically brought into organisations by individuals who have purchased them independently, rather than being issued as part of an co-ordinated IT department rollout.

This makes them very difficult to control and manage when they are connected to corporate networks.

Bamforth added that, while viruses currently present little danger to the actual mobile handsets themselves, the greatest problem comes from the devices being used as a transmission medium through which viruses could infect company infrastructures.

"There are two main issues with mobile viruses. The first is the danger of the devices itself being infected by a virus specific to its platforms," he said.

"But the other issue, which people tend to gloss over, is the biggest danger. This is the problem of what the mobile devices can upload onto the network.

"It's the danger of a PC virus being uploaded to a corporate network by the mobile device, rather than the device itself being directly attacked.

"This is an area that companies have yet to address properly. There are lots of tools around and there are lots of vendors with smart ideas and products that can address the problems.

"But at the end of the day policy and procedures are what security stands or falls on. The rest of it is just tools, which are useless unless they are implemented properly."

Jack Clark, a member of the AntiVirus Emergency Response Team at security company Network Associates, warned that the danger from mobile viruses, while insignificant at present, is set to grow dramatically as the use of PDAs and smartphones proliferates.

"Where there is new technology, there will be people trying to exploit its weaknesses as well as its strengths," he explained.

"As convergence becomes a reality, and mobile devices are able to house more and more sensitive information, the threat of malicious mobile virus code increases.

"One thing is for certain though: mobile devices and operating systems are firmly on the agenda of virus writers all around the world who relish the challenge of entering the mobile market.

"In order to predict the future we need to look as the past. How many organisations realised the importance of antivirus software after being hit by Melissa?"

Clive Longbottom, strategy analyst at research firm Quocirca, agreed that companies need to be aware of the growing threat from mobile viruses and implement countermeasures.

"There have already been viruses identified that target mobile handsets and there will be a hell of a lot more as smartphones start to take off. For PDAs there have been Palm viruses and also infections on the Microsoft Pocket PC platform," he said.

"As we become more mobile companies are slowly waking up to the threat and are starting to look for antivirus protection for mobiles.

"There are a number of antivirus vendors that have already developed products that protect against this type of threat, but they are not promoting them at the moment as there is little demand."

This view is endorsed by Raimund Genes, president of European operations at antivirus company Trend Micro. He said that there is currently little problem with mobile devices spreading malicious code into enterprise networks because most PDAs and phones have relatively simple operating systems.

But Genes warned that this is changing as the operating systems become more sophisticated, and always-on connections such as GPRS become more common.

"At the moment the operating system in mobile devices is limited and fairly well shielded," he explained. "But there will be more and more demand from the customers for applications. I believe that by 2005 we will have a real problem with viruses on these phones."

According to the 2002 Corporate Wireless Survey conducted by analyst company Yankee Group, security concerns are creating a serious barrier to mobile data adoption for the majority of enterprises.

Eugene Signorini, senior analyst at the Yankee Group, stated: "Sixty-eight per cent of respondents 'somewhat' or 'strongly' agree that security is a barrier to the adoption of wireless data services, reflecting an overall concern within enterprises surrounding security for all information technologies.

"With fixed networks continuing to succumb to security breaches, there is a perception that wireless networks are even more vulnerable to unauthorised access."

Mike Short, chairman of industry body the Mobile Data Association, advised companies to select a professional partner to develop their mobile security and antivirus policies.

"The first challenge is to find the right partner," he said. "When you go from a wired to a wireless local area network you must have specialist help. Most enterprises don't really have the technology depth in-house to achieve this difficult transition."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Mosquito mobile Trojan

Mosquito Trojan set to infect mobiles

Virus hidden in pirated game sends text messages at premium rates

Students offered virus writing course

Should make for an interesting edition of University Challenge

Mobile business

From hot spots to hot desks, the mobile business revolution is upon us.

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

IT white papers

Search white papers

Top categories

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

Piracy, privacy and processing power set to be hot topics for V3.co.uk Summit

Have you got a burning desire to quiz experts from...

iPhone

World's first iPhone virus surfaces

Images of 80s icon Rick Astley spell trouble

Airvana HubBub

Airvana debuts 3G femtocell for offices

HubBub improves indoor network coverage for businesses

shopping key

E-commerce on brink of SaaS revolution

Figleaves founder argues platform-as-a-service vendor will emerge to shake up...

Primary Navigation