Mobile Device Security: Corporate-Owned Personally-Enabled (COPE)

Abstract

Mobile devices provide access to vital workplace resources while giving employees the flexibility to perform their daily activities. There are several options for deploying mobile devices. One deployment model is Corporate-Owned Personally-Enabled (COPE). COPE devices are owned by the enterprise and issued to the employee. COPE architectures provide the flexibility of allowing both enterprises and employees to install applications onto the enterprise-owned mobile device. Securing mobile devices is essential to continuity of business operations. While mobile devices can increase efficiency and productivity, they can also leave sensitive data vulnerable. Mobile device security tools can address such vulnerabilities by helping secure access to networks and resources. The National Cybersecurity Center of Excellence (NCCoE) at the National Institute of Standards and Technology (NIST) built a laboratory environment to explore the challenges of securing mobile devices while managing risks and how various technologies could be integrated to help organizations secure their COPE devices. This NIST Cybersecurity Practice Guide demonstrates how organizations can use standards-based, commercially available products to help meet their COPE mobile device security and privacy needs. CHALLENGE Mobile devices are a staple within modern workplaces. As employees use COPE devices to perform tasks, organizations are challenged with ensuring that these devices process, modify, and store sensitive data securely. COPE devices bring unique threats to the enterprise and therefore should be managed in a manner distinct from desktop platforms.

Cyber Security to Android Mobile Devices

“…Затова е необходима мощна и адекватна за сигурността архитектура. Тя има многопластова сигурност, проектирана да осигурява необходимата гъвкавост за ОС с отворен код [1], [2], [5], [8].…”

“…Стартирането на всяко приложение в Android е свързано със създаването на отделен процес, който първоначално съдържа една единствена изпълнявана нишка [2], [8]. По подразбиране всички компоненти на приложението се изпълняват в тази нишка, която се нарича "главна" (main).…”

“…Уязвимостите причиняват загуба на данни, споделяне на лична информация и други. Основните уязвимости в ОС Android са [1], [5], [8], [9]…”

Security guidance for first responder mobile and wearable devices

“…Other features require additional third-party services to apply security features such as policy configurations, encrypt data transmissions, or analyze mobile applications. The practice guide, NIST SP 1800-21 Mobile Device Security: Corporate-owned Personally-enabled, discusses some of the various mobile device security solutions that can be used to apply security configurations and policies to a mobile device [12]. These solutions include an Enterprise Mobility Management (EMM) solution, Mobile Application Vetting (MAV), and Virtual Private Network (VPN).…”