Mobile Spyware

More documents

Recommendations

Info

Presenter Background • Currently – Sr. Security Researcher, Veracode, Inc. • Previously – Security Consultant - Symantec – Security Consultant - @Stake – Incident Response and Forensics Handler • Wishes He Was – Infinitely rich – Able to leap tall buildings in a single bound – Smarter than the average bear © 2010 Veracode, Inc. 2
Agenda • Background • Attacker Motivation • Malicious Mobile Applications In The Wild • Mobile Security Mechanisms • Potential Effects of Behaviors • Detecting Malicious Mobile Applications • Mitigation © 2010 Veracode, Inc. 3
Page 1: The Monkey Steals the Berries Mobil
Page 5 and 6: Malicious Mobile Applications • O
Page 7 and 8: Attacker Motivation • Practical m
Page 9 and 10: Percentage Growth in Market Share U
Page 11 and 12: Applications Sold (In Billions) iPh
Page 13 and 14: Back To The Future © 2010 Veracode
Page 15 and 16: FlexiSpy • http://www.flexispy.co
Page 17 and 18: Mobile Spy • http://www.mobile-sp
Page 19 and 20: Etisalat (SS8) • Cell carrier in
Page 21 and 22: Symbian Sexy Space • Poses as leg
Page 23 and 24: 09Droid - Banking Applications Atta
Page 25 and 26: Mobile Security Mechanisms © 2010
Page 27 and 28: Common Mobile Security Mechanisms
Page 29 and 30: Code Signing • Subset of Blackber
Page 31 and 32: Blackberry IT Policies • Requires
Page 33 and 34: V4.7.0.148 Default 3 rd Party Appli
Page 35 and 36: V5.0.0.328 Trusted 3 rd Party Appli
Page 37 and 38: Installation Methods • Accessing
Page 39 and 40: Exfiltration and C&C Methods SMS (N
Page 41 and 42: Command and Control Channels • in
Page 43 and 44: Location Listener • Create the cl
Page 45 and 46: Detecting Malicious Mobile Code ©
Page 47 and 48: Detecting Malicious Mobile Code •
Page 49 and 50: Defense in Depth Do all of the abov
Page 51 and 52: Conclusion • We are currently tru
Page 53:
Questions?
show all

Mobile Spyware

Create successful ePaper yourself

Delete template?

Save as template?