Context research raises questions about tablet security for BYOD
TweetFollow Us on Twitter

Context research raises questions about tablet security for BYOD


Context Information Security (www.contextis.com) says it's identified security failings in three of the most popular tablets, raising concerns for organizations looking to introduce BYOD (Bring Your Own Device).

In the company's study, the Samsung Galaxy Tab was found to have serious weaknesses that make it difficult to recommend for use in the enterprise, according to Context. And while the iPad and BlackBerry PlayBook performed better, both still have security problems including desktop software that doesn't encrypt backups by default. The BlackBerry was the only device found to have a workable solution to BYOD and provide good separation between personal and work data.
 
The full Context report "Tablets - A Hard Pill to Swallow" can be downloaded at http://macte.ch/B92QZ

Context found that while all three tablets have reasonably good support for Exchange ActiveSync, which means that the core security configurations can be managed from a central Exchange server, there are significant differences in security levels between the Galaxy tablet and the iPad and PlayBook. Context investigated a number of security controls to determine whether they were suitable for enterprise use. These included data protection, software integrity and updates, access control, security configuration profiles and connectivity, along with backup and synchronisation.   
 
Despite its popularity as a consumer device, the iPad was shown to have robust data protection and damage limitation facilities. However, vulnerabilities still include the regularity of new jailbreak attacks and ineffective disk encryption, unless a strong passcode policy is applied.

And although the iPad’s disk encryption scheme is well designed, the default behaviour for iTunes backups is to store the files in clear text; the same approach adopted for the BlackBerry. The Samsung Tablet does not ship with a locked bootloader and the disk encryption provides weaker support, which is more intrusive to use. Even when encryption is enabled on the Galaxy, it allows badly-written apps to store sensitive information on the unencrypted SD card, according to Context..
 
A lack of enterprise-level management tools beyond ActiveSync also means that it is very difficult to manage more than a small number of Galaxy Tabs in an enterprise environment, a problem shared with the iPad using Apple tools available, according to the research group. Context found that the BlackBerry is far more advanced in its level of readiness for BYOD than either of the other two tablets. Its Balance architecture in combination with the Bridge application, provide excellent logical and data separation between work and personal modes.
 
"It is difficult to ignore the growing presence of tablet computers in the home and workplace offering a blend of productivity, connectivity and physical freedom which has never been achieved before," says Jonathan Roach, Principal Consultant at Context and author of the report. "The device format is perfect for social networking and creating and sharing documents, presentations and other content on-the-fly, but the same characteristics also present tough security challenges for organisations. Our research suggests that most tablet manufacturers still have a way to go before their products can deliver the high levels of security required for use in most corporate enterprises."
 
Context was launched in 1998 and has a client base that includes blue chip companies, alongside government organizations.

 
AAPL
$522.20
Apple Inc.
+3.19
GOOG
$536.90
Google Inc.
-19.64
MSFT
$39.78
Microsoft Corpora
-0.62
MacNews Search:
Community Search:

Latest Forum Discussions

See All
view counter

view counter
view counter
view counter
view counter
view counter
view counter

Bad Vamp Review
Bad Vamp Review By Jennifer Allen on April 17th, 2014 Our Rating: :: BASIC VAMPIRIC ADVENTURESUniversal App - Designed for iPhone and iPad Run or destroy the vampires in this simple, single-screen game that lacks real bite.   | Read more »
The Shadow Sun gets a New Update, Goes o...
The Shadow Sun gets a New Update, Goes on Sale for the First Time Since its Release Posted by Tre Lawrence on April 17th, 2014 [ permalink ] | Read more »
Bullet Pea Review
Bullet Pea Review By Jordan Minor on April 17th, 2014 Our Rating: :: PEA SHOOTERUniversal App - Designed for iPhone and iPad Bullet Pea’s “jumps only” gameplay is novel in theory, but has problems in practice.   | Read more »
Real Racing 3 gets a New Update that Add...
Real Racing 3 gets a New Update that Adds in Open Wheel Racing Experience and More Posted by Tre Lawrence on April 17th, 2014 [ permalink ] | Read more »
Runtastic PRO Review
Runtastic PRO Review By Jennifer Allen on April 17th, 2014 Our Rating: :: COOL RUNNINGSiPhone App - Designed for the iPhone, compatible with the iPad Keep track of your runs, cycles, and more with this feature-rich exercise app.   | Read more »
Download pickWEB and Access a Thematic C...
Download pickWEB and Access a Thematic Catalogue of the World’s Most Interesting Websites [Sponsored] Posted by Simon Reed on April 17th, 2014 [ | Read more »
Unpossible (Games)
Unpossible 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: **Important** Requires at least iPad 2, iPhone 4S, iPod Touch (5th gen), or newer. | Read more »
Hitman GO (Games)
Hitman GO 1.2 Device: iOS Universal Category: Games Price: $4.99, Version: 1.2 (iTunes) Description: Get your daily fix of Agent 47 with this elegant, strategy-based Hitman game! | Read more »
The Seventh Sign: Hodappy Bird Released...
The Seventh Sign: Hodappy Bird Released on the App Store Posted by Jeff Scott on April 16th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Rogue Heroes (Games)
Rogue Heroes 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: Rogue Heroes is awesome fast-paced 2D action-platforming roguelike game with RPG elements. - explore the depth of procedurally generated levels- upgrade your hero- level up and collect equipment with unique set bonuses- complete... | Read more »
All contents are Copyright 1984-2010 by Xplain Corporation. All rights reserved. Theme designed by Icreon.