Penetration testing has been used to uncover vulnerabilities loitering in the mobile operating systems that are most commonly used today.
1.2 Billion Smartphones will enter the market in the next 5 years, that’s 40% of handsets. 75% of companies allow employees to use their own devises at work (BOYD) this is predicted to rise to 90% BY 2014. Is penetration testing being used enough?
90% of vulnerabilities are common in desktops but these were also found to be present in both Android and iOS mobiles. 87.5% of mobile applications have flaws in transmitting sensitive data. 92-100% of free aps send unencrypted data.
Initially a smart phone was a luxury to some. It has now evolved into a device deemed essential by many. We carry them around like an extension of our hand to access e-mails, movies, news and social media – we spend hours looking at the screen and within it there are apps and apps and apps that can do everything except wash the pots and change the bedding!!
So how do you know if your smartphone has been attacked?
Well you don’t always unless you see larger bills or if minutes are being used quicker. Other signs include the high usage of your data (because it is being moved from your device to a third party). It could be your battery life is decreasing dramatically. Maybe some strange issues in its performance caused by lack of phone memory or storage space. Briefly if your phone is acting odd it has probably been accessed by attackers. With the use of BOYD and our use of mobile devises, security is too often overlooked. Ethical hackers have used penetration testing to uncover vulnerabilities lurking in the mobile operating systems. A prime example for the need of penetration testing in today’s society.
You would think hackers would aim for the big and the rich, and they do, but if given a choice between the easy pickings of your unprotected mobile device or the hard-core security systems of a large transnational corporation, they would choose yours — the least challenging. Malware for android devises increased by 400% in 2012 and these consisted of backdoors, SMS Trojans and spyware. Spyware made up 51% of all new Android malware.
Some tips to keep your phone secure, don’t save passwords, lock your screen, don’t jailbreak your phone, only use apps from trusted sources and stores, install anti-malware, and update your operating system.
This is one small example in the vast arena of technology that consumes our daily lives, why penetration testing is important, even when you think you are using secure and trusted sources, attackers can still get to your data.
If your business needs help with penetration testing, security audits or web security solutions, please contact Krypsys on 01273 044072 or [email protected].