5 ways to secure your Blackberry

What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands

It seems we can't go a day lately without a new story about some security screw-up involving a lost or misplaced Blackberry. This week, officials with John McCain's campaign mistakenly sold a Blackberry to a Fox television reporter for US$20 in a fire sale. The device contained confidential campaign information. And many Hollywood gossip publications were abuzz earlier this month with news that Tom Cruise had lost his Blackberry while promoting a movie in Toronto. (Mixed reports now peg the device as either "found," or "never lost in the first place.")

With all of these slip-ups, it's no wonder White House officials want President-Elect Barack Obama to relinquish his Blackberry before taking office. With this in mind, CSO asked Dan Hoffman, author, mobile security expert and CTO of SMobile Systems, for his advice on ways to keep your Blackberry safe.

Treat your Blackberry like a PC You wouldn't shop online, open email attachments and check your bank account on your PC without having the proper firewalls, anti-virus and anti-malware protections in place, would you? So, why are you doing it with your Blackberry? A Blackberry is a mini computer, said Hoffman.

"The perception that viruses and malware are not a problem on Blackberries is out dated," said Hoffman. "The reason we don't hear about widespread infections is because the nature of malware has changed. Infections used to be done for fun and notoriety. Now these crimes are financially motivated."

Without software that can scan for problems and update virus definitions, Blackberry owners are being quietly infected without even knowing it, said Hoffman. And the creepiest part of that news is that the most popular type malware currently seen on Blackberries is spyware, according to Smobile Systems research.

"Spyware can intercept every email and text message that goes in and out of the device. And it can remotely turn on the phone and listen in on conversations," said Hoffman.

Watch your back Does this sound familiar? You are killing time during a layover in Dallas and are housekeeping on your Blackberry: Checking and responding to work emails, making important work-related calls. Maybe you are even checking your bank account.

"I can't even tell you how much personal and sensitive information I've inadvertently seen or heard over the years because of what people were doing with their mobile devices," said Hoffman.

Hoffman recounts a recent flight where he sat directly behind a Blackberry user who was organizing all of his passwords and entry codes.

"I could see everything though the seats," said Hoffman.

Tags: Blackberry

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CSO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
CSO Corporate Partners
  • FirEye
  • Clear Swift
  • Trend Micro
  • Sophos
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

AVG Internet Security 2011 Business Edition

Ultimate protection for your small or medium-sized business

Security Awareness Tip
Software security company www.clearswift.com gives some advice this holiday season to make sure employees don’t end up on Santa’s naughty list!


At a fundamental business level, social media is a useful additional tool for communicating and collaborating with customers, colleagues and new business prospects. From an HR point of view, the social web is not only useful for recruitment but also as a knowledge network. At an employee level, social media is changing the way we work: Employees increasingly expect to be able to access personal technology and services in the workplace. As the lines between work and home life blur, staff are looking for greater flexibility in their roles; working from home is an increasing trend, but so too is ‘home-ing from work’, where staff expect to be able to perform personal tasks at work.

But social media brings risk and reward to business in equal measure. Information security is a key concern: Many organisations view social media channels as yet another route along which sensitive data can escape from the business, whether accidentally or maliciously. On top of this, senior management may be concerned about the amount of time employees spend on social networks.

This cultural shift raises new questions about trust in the workplace, the balance of power in employer / employee relationship and levels of control over people and content.


Organisations using content and web security technology can manage the way their staff use email and the internet without having to resort to a default position of mistrust. With a whopping third of ANZ employers completely blocking social media access at work, there’s a real danger of throwing the benefits of collaboration out with the risks.


It doesn’t have to be that way.

Trust breeds responsibility: People underestimate the amount of company time they spend on personal browsing. Allow staff to view their own web usage and foster more responsible behaviour without undermining trust.


Know limits: Set clear limits on personal surfing and communicate them to users. Alert them when they are approaching their limit. Help your people to play by the rules.


Share the load: Spread responsibility for usage reporting among managers and department heads so everyone gets to see how their usage impacts on the rest of the organisation. This also gives managers greater control and visibility into usage.


Need to know: Yes, you need reports and visibility. What you don’t need is employee data becoming common knowledge. Access control means reporting can be adjusted on a need-to-know basis.


Security ABC Guides

7 Ways to Protect Your Business Printers

Can a hacker burn down your business by remotely setting one of your printers on fire? Researchers at Columbia University have recently proposed such a scenario, although HP quickly denied that it's possible. However, even if your printers can't be used as remote firestarters, there are many risks involved in networking a printer.