Popular tablets have worrying security flaws
- 08 October, 2012 12:02
- Comments
Serious security flaws in the Samsung Galaxy Tab tablet device make it difficult to recommend for use in the enterprise, raising concerns for organisations looking to introduce bring-your-own-device (BYOD) policies, according to a new study.
The research – published by Context Information Security – also looked at the enterprise security features of competing devices, the Apple iPad and RIM BlackBerry PlayBook.
It found that although these devices performed better than the Samsung Galaxy Tab in relation to security controls, “they both have security problems including desktop software that does not encrypt backups by default.”
Context investigated several security controls to determine if they were suitable for enterprise use. These included data protection, software integrity and updates, access control, security configuration profiles and connectivity, and backup and synchronisation.
The Samsung Galaxy Tab doesn’t ship with a locked bootloader and its disk encryption scheme has vulnerabilities. Even when encryption is enabled on the Galaxy, it allows badly written apps to store sensitive information on the unencrypted SD card, the report said.
A lack of enterprise-level management tools beyond Microsoft Exchange ActiveSync also means it’s difficult to manage more than a small number of Galaxy Tabs in an enterprise environment, the report said. The Apple iPad also shares this problem with the Apple tools that are available, the report added.
The report's author, Jonathon Roach, said the tablet’s format is perfect for social networking and creating a sharing documents, presentations and other content on-the-fly “but the same characteristics also present tough security challenges for organisations.
“Context’s research suggests that most tablet manufacturers still have a way to go before their products can deliver the high levels of security required for use in most corporate enterprises,” Roach said.
Despite these issues, Context found that all three tablets have reasonably good support for Microsoft Exchange ActiveSync, which means that core security configurations can be managed from a central Exchange server.
The company said the BlackBerry was “far more advanced in its level of readiness for BYOD than the other two tablets and provided excellent logical and data separation between work and personal modes.
Whether or not the Samsung Galaxy Tab is suitable for the enterprise may be the least of Samsung’s problems.
The company is locked in a legal battle with Apple over patents and in August, a jury in California found it had improperly violated patented technology in the iPhone and iPad. Apple was awarded US$1.05 billion in damages.
A fresh battle may emerge between the two companies after The Wall Street Journal reported today that Samsung planned to run a television commercial that “pokes fun at Apple’s iPhone 5” in Australia and New Zealand. A similar commercial is being run in the US.
Recommended
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
- Bookmark this page
- Share this article
- Got more on this story? Email CIO
- Follow CIO on twitter
-
Australia suspected to have PRISM data: Ludlam
-
Australia Post’s mail business to lose $200 million this year
-
Australia Post’s mail business to lose $200 million this year
-
Microsoft's ambivalence about Office on the Web gives Apple shot with iWork on iCloud
-
3 Lessons Learned From a Failed Customer Feedback Test
-
Detecting APT Activity with Network Traffic Analysis
Today’s successful targeted attacks use a combination of social engineering, malware, and backdoor activities. This research paper will discuss how advanced detection techniques can be used to identify malware command-and control (C&C) communications related to these attacks, illustrating how even the most high-profile and successful attacks of the past few years could have been discovered. -
Pathways Advanced ICT Leadership Development Program Course Outline and Big 6 2013
Developed by the CIO executive Council in conjunction with Rob Livingstone Advisory, Pathways Advanced is a 12-month CIO delivered, small group, mentor based professional leadership development program. Pathways Advanced brings together best practice, thought leadership and business insights for today’s most promising ICT professionals -
Advanced Persistent Threats and Real-Time Threat Management
Businesses face a constantly evolving threat landscape. One of the greatest challenges is presented by advanced persistent threats (APTs), which are sophisticated, multi‐faceted attacks targeting a particular organisation. Mitigating the risk of APTs requires advances beyond traditional layered security to include real‐time threat management. This whitepaper describes the nature of APTs, the risks they pose to businesses, and techniques for blocking, detecting, and containing APTs and other emerging threats. Read now.
Get exclusive access to Invitation only events CIO, reports & analysis. 
