Your Enterprise is Under Attack
summary
A commissioned study produces a three-phase framework and a device testing protocol that evaluates identification of security requirements, hardware/software design, and active penetration testing. Hands-on attacks exercise real vulnerabilities and reveal that headsets ship largely unhardened, collect persistent sensor data, and enable three concrete attack modes: headset compromise, headset-as-injection-point, and vector transition to other enterprise assets. Mobile device management alone proves insufficient; the work shows early cross-team responsibility, standardized vocabulary, and measurable tests are required for safe deployments.
AI-written summary · about
chapters (12)
- 0:00Start
- 3:02Nightmare Scenarios
- 4:29Brainwaive Cyber Security Team
- 5:38AR vs. Mobility vs. loT
- 7:00Framework Equivalence
- 8:14Methodology
- 8:43PHASE I - Identify Security Requirements
- 10:12PHASE II - Evaluation of Security Design 09 Differences vs. Mobile
- 10:53PHASE III- Penetration Testing
- 12:16Findings AR Headsets are Unique
- 14:05Framework Validation
- 15:24Join the AREA!
related talks
54mThe Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
49mThe Perimeter Has Been Shattered
05mEnterprise security: A new hope
34mManaging the Mobile Endpoint Attack Surface
40mIntegrating Mobile Devices into your Penetration Testing Program
31mConquer the Enterprise from Inside
23mBuilding an Endpoint Security program from scratch
48mMobile Device Mismanagement