If you still think Mobile Security is a thing of the future--think again. Millions of mobile devices worldwide were exposed in 2015 to vulnerabilities and advanced cyber-attacks including: No iOS Zone, XcodeGhost, Stagefright and SwiftKey to name just a few. Given 2015’s ultra-active cyber-risk front, we are sure 2016 has much more in store. In this webinar, Yair Amit, CTO and Co-founder at Skycure, wraps-up the state of mobile security in 2015 and shares his predictions for 2016.

1. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 1Yair Amit, Co-founder, CTO, Skycure December 2015
Mobile Security: 2015 Wrap-up and 2016 Predictions

2. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 2
Meet Your Speaker
Yair Amit
Co-founder and CTO
Skycure

3. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 3
Quick Housekeeping
• Q&A panel is available if you have any questions
• There will be time for Q&A at the end
• We are recording this webinar for future viewing
• All attendees will receive a copy of slides/recording
Join the discussion #MobileThreatDefense

4. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 4
Agenda
1. Highlights of 2015
2. 2016 Predictions
3. Mobile Security Plan
4. Q&A

5. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 5© 2015 Skycure Inc. - Confidential
Highlights of 2015

6. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 6
Modern Mobile Attacks

7. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 7
Physical Security
Loss
Theft
Unauthorized
Access

8. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 8
Network Security
Wi-Fi/
Cellular
Off-the-
shelf
hacking
gear
24x7
Exposure

9. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 9
SSL Decryption – A Growing Concern
92%
of users click on “Continue”
compromising their Exchange identity
(username and password)

10. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 10
”
Plain HTTP
Does it really
happen today?

11. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 11
SwiftKey Vulnerability
600 million Android (Samsung) devices vulnerable
PRE-INSTALLED
KEYBOARD
UNENCRYPTED
UPDATES
MITM
SYSTEM
ACCESS

12. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 12
“No iOS Zone”
iOS crashes
“No iOS Zone” exploited again
iPhone crashes again
Device restarts
and again
and again
and again

13. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 13
Malware
External
Stores
Repackaged
Apps
New
infection
vectors

14. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 14
XcodeGhost
• Lures developers into using a malicious development environment
• Malicious apps were approved by Apple and made it to the AppStore

15. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 15
YiSpecter
• Impacts both jailbroken and non-jailbroken devices
• First major iOS malware that uses Apple’s private APIs

16. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 16
Vulnerabilities
OS & App
Level
Patching
Challenges
Never
Ending
Story

17. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 17
Known iOS Vulnerabilities - Apr. 15’ Est.
0
20
40
60
80
100
120
140
160
180
2007 2008 2009 2010 2011 2012 2013 2014 2015
Number of CVEs Trajectory (Apr 15')
Source: Skycure analysis based of CVEdetails.com

18. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 18
Known iOS Vulnerabilities - Final
Source: Skycure analysis based of CVEdetails.com
0
50
100
150
200
250
300
350
400
2007 2008 2009 2010 2011 2012 2013 2014 2015
Number of CVEs

19. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 19© 2015 Skycure Inc. - Confidential
Mobile Security Threat Reports

20. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 20

21. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 21

22. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 22

23. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 23

24. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 24

25. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 25© 2015 Skycure Inc. - Confidential
2016 Predictions

26. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 26
Android malware will continue to evolve
2011
Google Play is
riddled with
malware
2015
Google Play is
riddled with
malware
3rd party stores
are riddled with
malware
Google introduces
technologies such as
“Bouncer” and “Verify Apps”
What next?

27. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 27
Malware Scanners Effectiveness

28. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 28
Multi-Factor
Authentication will
be Further
Embraced by Users
• Stealing a password will continue to become less effective
• Greater reliance on mobile devices
• Result – attackers focus their hacking campaigns on mobile devices

29. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 29
Hackers will
Leverage Mobile to
Attack Enterprises
• Utilization of a growing arsenal of attacking tools
• Mobile as an easy springboard to corporate resources
• Focus on exploiting human and software vulnerabilities via network and
application-level attack vectors

30. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 30
Healthcare
adoption of
mobility will
continue to grow
70% of Doctors would use mobility
to manage patient data: A growth
from ~8% just 2 years ago

31. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 31
10+ Billion
Connected
Devices in
3 Years
• Wearables to monitor more health data
• Healthcare data is worth a lot
• Hackers to focus on unsecured healthcare apps/devices

32. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 32
Mobile payments
will gain more
traction
• Mobile payment volume in the US will grow to
$818 Billion by 2019.
• Starbucks: 8 million mobile transactions per week.
21% of total sales.
• 2% of transactions at top 5 retailers are through
Apple Pay.

33. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 33© 2015 Skycure Inc. - Confidential
Mobile Security Plan

34. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 34
Old Endpoint Vs. New Endpoint
IPS
IDS
FIREWALL
USB
SECURITY
DLP
DATA
ENCRYPTION
WIRELESS SECURITY
APPLICATION CONTROL
AV
?

35. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 35
4 Tips for CIOs
Predict
Identify high-risk
situations in
advance using
crowd wisdom
Detect
Find mobile
threats
before they
reach your
organization
Prevent
Stop threats
automatically
using existing
policies
Adapt
Learn from the
new threats to
adapt your
security policy

36. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 36
You need “Waze”
• Protect against known, unknown and
ZERO-day attacks
Malware: How do you predict next-gen malware attacks?
Exploit: How do you know if the exploit was not tailor-made for your organization?
Network: How do you know if the network you connect to is real or fake?
Predict

37. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 37
Predict

38. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 38
Comprehensive Detection Detect
Applications
• Policy Violations
• Malware
Vulnerabilities
• iOS & Android
• CVSS – Open Standard
Device
• Lost
• Stolen
• Imporper Configuration
Networks
• Suspicious
• Malicious

39. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 39
Automated Remediation
• No CIO or IT needs yet
another console to look at
• Use your EXISTING tools
and policies
- SIEM
- EMM/MDM
- VPN
- Email servers
Predict

40. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 40
Adapt
1. Learn from the new threats
2. Identify top attacked people/departments
3. Educate them
4. Do cyber-security drills
Adapt

41. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 41
Skycure Mobile Threat Defense
• Seamless experience
• 24x7 detection and protection
• Device, app, and network analysis
• Multi platform – Android and iOS
Employee
• Flexible deployment
• Policy creation and enforcement
• Reporting and compliance
• Enterprise integrations
IT Team
Mobile Threat Intelligence
• Millions of tests per month
• Millions of networks and apps analyzed
• Zero-day threat protection
• Predictive Security
Attack
Vector

42. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 42
c
https://maps.skycure.com
c

43. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 43
Summary
• The problem of mobile security is real and is already here
• An ideal solution should offer layered security:
- Physical compromise
- Network attacks
- Malware infections
- Vulnerabilities
• Enterprises are moving towards
risk-based mobility
• Skycure is leading the charter
ATTACK
VECTO
R

44. Title of Presentation DD/MM/YYYY© 2015 Skycure Inc. - Confidential 44
Next Steps
Request a FREE 30 Day Trial!
sales@skycure.com, Phone: 1-800-650-4821
https://www.skycure.com/trial
https://blog.skycure.com
@SkycureSecurity, @yairamit
https://www.linkedin.com/company/skycure