Vodafone is poised to launch its first product in partnership with enterprise security firm Detica, after announcing details in a customer webinar last week (26 March).
Dubbed Vodafone Mobile Threat Manager, the cloud based, network agnostic mobile data security solution encrypts data in transit, passing it through a filter stack. The product protects against malware, viruses, botnets and phishing attacks, regardless of their origin.
It includes app management as well as the ability to block improper content by preventing access to websites containing corporately unacceptable or illegal material. The solution works across all networks, without impacting on device performance.
During the webinar, Vodafone explained how flexible working is bringing new risks and challenges to security. The operator said the mobile industry is seeing a new range of attacks from hacktivists and botnets, as well as other viruses.
‘The threats of the fixed world are now happening in the mobile world,’ said Vincent Geake, head of secure mobility, BAE Systems Detica.
‘It’s worth considering a cloud based solution,’ added Simon Leak, product manager at Vodafone, saying that the estimated cost to businesses in Europe from attacks is €1.7m.
Vodafone and Detica have agreed a roadmap over the next few years including measures such as filtering HTTPS traffic. Vodafone is currently undergoing risk and behavioural-based analysis on the threats it anticipates for vulnerable businesses.
Vodafone Mobile Threat Manager does not currently include the ability to “partition” work and personal material, but Leak said the operator is looking at adding the capability. The security solution will initially be available to Vodafone’s largest 1,500 global enterprise customers.
The new product is part of Vodafone’s partnership with specialist security company BAE Systems Detica, announced in February, when the pair said they had entered a strategic five-year partnership to provide businesses with a range of advanced communications security products and services, initially focused on smartphones and tablets. The partnership also provides a framework for both companies to launch a broader range of joint security products in areas such as interconnected devices, using machine-to-machine technology.
Vodafone is hoping the partnership will extend its reach in the enterprise space by providing customers with ‘advanced and robust’ security products and services. Leak said: ‘The world is becoming more complex for those who manage multiple devices such as smartphones and tablets. It’s more complex than customers are used to doing and that’s why we’ve teamed up with Detica.’
Drive-by attacks are biggest mobile security threat, says ENISA
Drive-by attacks are the biggest security threat to mobile, according to a recent report by the European Network and Information Security Agency (ENISA).
In 2010, lost or stolen phones and phishing, such as accessing bank accounts, topped mobile security risks. However, in December 2012, ENISA’s report noted more sophisticated technology and a move from small scale financial attacks to accessing corporate information. As well as drive-by exploits, worms, trojans, identity theft and the compromising of confidential information rated highly on the list.
Drive-by threats occur when malicious code is injected into the HTML code of a website. It affects users’ browsers, plug-ins and operating systems when they visit the site, and is then used to gather information. According to ENISA, the first drive-by for Android was discovered in May 2012.
Mobile security is increasingly at risk in Europe, particularly in the financial services and legal sectors, Vodafone said. Vodafone’s Leak added: ‘For a couple of hundred dollars you can buy mobile malware online with information on how to use it. That’s how we see the threat evolving.’