Presentation SE-4060, Securing the Mobile World, by Norman Shaw and John Pragnell at the AMD Developer Summit (APU13) November 11-13, 2013.

1. Protec'ng Mobile Data
• Norman
Shaw
• CEO
• ExactTrak
Ltd

2. Discussion points
• Why
protec9ng
mobile
data
is
difficult
?
• What
is
going
wrong
?
• What
can
be
done
?
• Address
the
differing
needs
of
enterprise
and
consumer
• Some
innova9ve
solu9ons
• Maximise
the
commercial
opportuni9es
• A
glimpse
into
the
future

3. There are a lot of good solu'ons:
but
s9ll
there
are
problems

4. Polarised Target Markets
Enterprise
Consumer
Restricts
freedom
of
use
Not
secure
enough
for
enterprise

5. Just some of the problems
• 76%
have
lost
a
laptop,
tablet
or
mobile
with
sensi9ve
data
• 84%
use
personal
emails
to
send
sensi9ve
informa9on
• 50%
use
public
cloud
services
to
send
sensi9ve
files
• More
than
30%
have
lost
a
USB
drive
containing
confiden9al
informa9on
• 63%
of
IT
managers
lack
visibility
of
mobile
data
within
their
organisa9on
Wall
Street
Journal
Aug
2013
5000
interviews

6. and then there is ….
ring
B
Y
our
O
wn
isaster
D
50%
of
firms
with
BYOD
policies
have
had
a
security
breach
32%
do
not
have
a
BYOD
contract
40%
don’t
password-­‐protect
their
mobile
devices
51%
connect
their
devices
to
unsecured
wireless
networks
52%
enable
their
“Bluetooth
discoverable”
mode.
Dell
survey
2013

7. Legal issues
• Who
owns
the
data
• Who
has
control
• What
are
my
rights
• Rights
to
walk
away
• Right
to
delete

8. Dele'ng data
1881
devices
lost.
680
recovered
Remote
delete
requests
Recovered
• iOS
%
deleted
317
43%
• Android
193
57%
• Blackberry
170
61%

9. What are we protec'ng?
Enterprise
data
Personal
informa9on
Hardware
Reputa9ons
all
of
the
above?

10. What are we protec'ng data from?
• Employees
• Stupidity
• Ignorance
• Loss
• Thec
• Fraud

11. Privacy
• We
know
what
you
are
doing
• Who
can
see
my
files
• Prism

12. Consumer vs. Enterprise
• Twin
approach
strategy
• Something
for
everyone

13. Obstacles to overcome
• Opera9ng
system
• Updates
cause
problems
• Roo9ng
• Reset

14. What is needed
• Easy
to
use
• Addresses
Enterprise
and
consumer
needs
• Mul9
plaeorm
• Mul9
form
factor
• Deployment
Secure
and
Flexible
• Make
the
user
part
of
the
solu9on

15. Security Guardian
4
-­‐64
GB
memory
Secure
laptop
Access
EncrypBon
Data
Delete
GPS
Ba9ery
Memory
Switch
Remote
Control

16. Management console
• Cloud
based
• Management
&
user
interface
• Loca9on
via
GPS,
GSM
&
WiFi
• Geozones
• Timed
access
• OTA
configura9on
• Remote
turn
On
and
Off
• Remote
data
destruct
• Verifiable
audit
trail
and
repor9ng

17. Moving forward

18. GeJng on the Route of Trust
Trusted
Execu9on
Environment

19. A power train

20. The ExactTrak approach
Home
Personal
Work
Enterprise
Access
privileges
VPN
Profiles
Apps
Email
Files
etc.

21. Ticking the boxes
• Route
of
Trust
starts
at
power
On
• Opera9ng
System
independent
• Total
separa9on
of
work
/personal
informa9on
• Individual
keys
to
protect
privacy

22. Commercial opportuni'es
How
many
products
with
TrustZone
300m
and
growing
?
Sold
as
a
service
License
Management
Console
licenses
Corporate
/
Enterprise
user
licenses
Consumer
user
licenses
Upgrades
depending
on
service
/
func9on
White
label,
OEM
and
bespoke
customisa9on
Ac9va9on
fee
for
ODM
/
OEM
Partnership
with
exis9ng
MDM
service
providers

23. Future
• Embedded
GSM
modem
for
any9me
security
• Self
provisioning
SIM
on
chip
• Informa9on
Lifecycle
Management
• Remote
Key
Management
• Wearable
gadgets

24. Discussion points
• Why
protec9ng
mobile
data
is
difficult
?
• What
is
going
wrong
?
• What
can
be
done
?
• Address
the
differing
needs
of
enterprise
and
consumer
• Some
innova9ve
solu9ons
• Maximise
the
commercial
opportuni9es
• A
glimpse
into
the
future