Managing the Mobile Endpoint Attack Surface
summary
Covers applying risk management to BYOD and COPE deployments with a lab-built example architecture that uses enterprise mobility management, mobile application vetting, data isolation, mobile threat defense, trusted execution environment and VPNs to address identified threats. Uses NIST SP 800-30 style risk assessments, maps threats to mitigations using the Mobile Threat Catalog, highlights privacy PDAs (unwarranted wipes, surveillance) and cites that 86% of IT managers report rising mobile attacks.
AI-written summary · about
chapters (20)
- 0:00RSAConference 2023
- 3:03You've been phished!
- 6:19What Are The Layers Of A Mobile Device?
- 8:21Mobile Device Components
- 9:08Cybersecurity And Privacy Risks
- 10:25Mobile Security Threat Examples
- 11:53Overview: Mobile Threat Catalogue
- 12:49NIST Privacy Engineering Objectives
- 13:54Problematic Data Actions (PDA) Catalogue
- 14:37Mobile Privacy Risks
- 19:16Mobile Device Use Cases
- 20:40Cybersecurity Framework
- 22:25Privacy Framework
- 24:27Security Risk Assessment Example
- 25:20An Example Architecture
- 25:44Enterprise Mobile Security Technologies
- 28:02Privacy Risk Assessment Methodology Overview
- 29:15Privacy Risk Assessment Methodology Example
- 30:42Applying Next Steps
- 32:41Summary Slide
related talks
14mTop Security Threats to Mobile Devices in 2021 & Beyond
54mThe Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
23mBuilding an Endpoint Security program from scratch
18mYour Enterprise is Under Attack
40mIntegrating Mobile Devices into your Penetration Testing Program
49mThe Perimeter Has Been Shattered
48mMobile Device Mismanagement
45mTen Secrets to Secure Mobile Applications