Security Vulnerabilities Are At All Time Highs for Mobile Devices

Enterprise and consumer mobile devices are being exposed to a record number of security threats, including a 400 percent increase in Android malware, as well as highly targeted Wi-Fi attacks, according to a report.

With smartphones set to eclipse PCs as the preferred method of both personal and professional computing, cyber criminals have turned their attention to mobile devices. At the same time, the gap between hacker capabilities and an organization's defenses is widening. These trends underscore the need for further mobile security awareness, as well as more stringent, better integrated mobile security policies and solutions.

Key report findings:

--  App Store Anxiety: The single greatest distribution point for mobile malware is application download, yet the vast majority of smartphone users are not employing an antivirus solution on their mobile device to scan for malware
--  Wi-Fi Worries: Mobile devices are increasingly susceptible to Wi-Fi attacks, including applications that enable an attacker to easily log into victim email and social networking applications
--  The Text Threat: 17 percent of all reported infections were due to SMS trojans that sent SMS messages to premium rate numbers, often at irretrievable cost to the user or enterprise
--  Device Loss and Theft: 1 in 20 Juniper customer devices were lost or stolen, requiring locate, lock or wipe commands to be issued
--  Risky Teen Behavior: 20 percent of all teens admit sending inappropriate or explicit material from a mobile device
--  "Droid Distress": The number of Android malware attacks increased 400 percent since Summer 2010
       
Comment from Jeff Wilson, principal analyst, security, at Infonetics Research: The last 18 months have produced a non-stop barrage of newsworthy threat events, and while most had been aimed at traditional desktop computers, hackers are now setting their sights on mobile devices. Operating system consolidation and the massive and growing installed base of powerful mobile devices is tempting profit-motivated hackers to target these devices. In a recent survey of large businesses, we found that nearly 40 percent considered smartphones the device type posing the largest security threat now. Businesses need security tools that provide comprehensive protection: from the core of the network to the diverse range of endpoints that all IT shops are now forced to manage and secure.

Comment from Dan Hoffman, chief mobile security evangelist at Juniper Networks: These findings reflect a perfect storm of users who are either uneducated on or disinterested in security, downloading readily available applications from unknown and unvetted sources in the complete absence of mobile device security solutions. App store processes of reactively removing applications identified as malicious after they have been installed by thousands of users is insufficient as a means to control malware proliferation. There are specifics steps users must take to mitigate mobile attacks. Both enterprises and consumers alike need to be aware of the growing risks associated with the convenience of having the Internet in the palm of your hand.

Recommendations for guarding against growing mobile malware threats for enterprises, government agencies and SMBs:

--  Employ on-device anti-malware to protect against malicious applications, spyware, infected SD cards and malware-based attacks against the mobile device
--  Use SSL VPN clients to effortlessly protect data in transit and ensure appropriate network authentication and access rights
--  Centralize locate and remote lock, wipe, backup and restore facilities for lost and stolen devices
--  Strongly enforce security policies, such as mandating the use of strong PINs/Passcodes
--  Leverage tools to help monitor device activity for data leakage and inappropriate use
--  Centralize mobile device administration to enforce and report on security policies
       
About the report: "Malicious Mobile Threats Report 2010/2011" was compiled by the Juniper Networks Global Threat Center (GTC) research facility, which conducts around-the-clock security, vulnerability and malware research tailored specifically to mobile device platforms and technologies. The GTC examines increasingly sophisticated attacks from 2010 and 2011, such as, Myournet/Droid Dream, Tap Snake and Geinimi as well as the pirating of the "Walk and Text" application, new threat vectors for mobile cybercrime, and the potential for exploitation and misuse of mobile devices and data.

Contact: http://www.juniper.net

Mobile Enterprise Apps Poised to Take Off in 2011

In 2011, 90 percent of IT managers are planning to implement new mobile applications and nearly one in two believe that successfully managing mobile applications will top their priority list, a survey has found. As a result both hosted and on-premise mobility solutions powered by a strong mobile enterprise application platform are valuable options for businesses to seriously consider in 2011.

A majority (82 percent) of IT managers share the belief that it would be beneficial -- not detrimental -- to host more of their mobile applications in the cloud.

Other findings:

-- The year of the mobile enterprise app: Nine in ten (90 percent) IT managers reported they will implement new mobile applications this year, with almost a quarter (21 percent) looking to introduce 20 or more applications into their organization. In addition, they anticipate supporting about eight different mobile platforms or operating systems by the end of 2011.

-- Mobile mismanagement: Despite the enthusiasm and flexibility shared by IT departments, many are currently not being strategic about mobility. Almost half of respondents (46 percent) who do not have a mobile strategy in place did not expect to hire staff to specifically deal with their enterprise mobility strategy while nearly the same number of respondents (45 percent) admitted they did not have a plan or timeline in place.

-- Mobile application priority: Forty-five percent of respondents predict that implementing or managing the onslaught of mobile enterprise applications tops the priority list in the coming year, even over more common issues such as adhering to IT budgets. Also, 56 percent of IT managers consider customizing company information for mobile purposes a crucial part of conducting business and not just a "nice to have." In addition, more than eight in ten (84 percent) of those who feel this way work for companies that are flexible about the use of new mobile applications or devices.

-- Mobile security concerns: Similarly, IT managers report that possible data security issues with mobile applications cause more problems (65 percent) than implementation (25 percent) or employee adoption hurdles (10 percent).

Other interesting findings from the 250 IT managers polled include:

-- Workers come first: One in two respondents (50 percent) say that employee demand is driving the adoption of new mobile applications.

-- Loyal to mobile: In fact, almost three in four (73 percent) say that decision makers are flexible and not rigid about incorporating new mobile applications and mobile devices into their organization, showing that many mid-to-large sized companies are committed to mobilizing the enterprise.

Comment from Dan Ortega, senior director product marketing, Sybase: The proliferation of new devices, coupled with the vast expansion of mobile applications used by consumers has paved the road for mobility solutions to enter the enterprise at the worker, workgroup, and workflow levels. Given all this, we expect 2011 to be the year of the transformation of the enterprise. As evidenced by this survey, IT managers will be faced with greater complexities and requirements across the entire enterprise mobility framework, which is where a leading mobile solutions provider like Sybase can take an entire industry to the next level.

About the study: The study was commissioned by Sybase and conducted by Kelton Research. The study consisted of online surveys of 250 IT managers in the U.S. and UK at companies with revenues of $100 million or more.

Contact: http://www.sybase.com

IT Professionals Predict Mobile and Cloud Technologies Will Dominate Enterprise Computing By 2015

Information technology professionals predict that mobile and cloud computing will emerge as the most in-demand platforms for software application development and IT delivery over the next five years, according to a new survey.

More than half of all IT professionals -- 55 percent -- expect mobile software application development for devices such as iPhone and Android, and even tablet PCs like iPad and PlayBook, will surpass application development on all other traditional computing platforms by 2015.

With the proliferation of these mobile devices, industry analysts are predicting mobile applications sales will undergo massive growth over the next three years, with estimates of mobile application revenues expanding from $6.2 billion this year to nearly $30 billion by 2013.

Additional survey findings:

-- 91 percent anticipate cloud computing will overtake on-premise computing as the primary way organizations acquire IT over the next five years

-- Mobile and cloud computing are followed by social media, business analytics and industry-specific technologies as the hottest IT career opportunities beginning in 2011

-- 90 percent believe it is important to possess vertical industry-specific skills for their jobs, yet 63 percent admit they are lacking the industry knowledge needed to remain competitive

-- Telecommunications, financial services, healthcare, and energy and utilities rank as the top four industries in which respondents identify as having the greatest opportunity to expand their careers.

Comment from Jim Corgel, general manager, IBM Independent Software Vendors and Developer Relations: To best understand where enterprise technology is headed, one must pay attention to those who have a pulse on market demands - the developers and IT specialists responding to these demands and creating the next generation of business applications. These survey results clearly demonstrate that IT professionals see a combination of disruptive technologies and industry-specific skills as key to driving near-term business growth.

About the survey: The 2010 IBM Tech Trends Survey provides insight into the most significant enterprise technology and industry trends based on responses from 2,000 IT developers and specialists across 87 countries. The online survey, conducted by IBM developerWorks of its eight million registered users in August and September 2010, includes responses from IT professionals with expertise in areas such as enterprise and web application development, system and network administration, and software testing and architecture.

Contact: http://www.ibm.com/developerworks