Technology Sectors

Market Sectors

Watch your mobile device on Black Friday

Geoff Webb

On Monday, November 14, Credant Technologies released an interesting survey of missing and lost mobile devices at the top 15 shopping malls in the U.S. Long story short, 2,200 tablets, smartphones and USB drives were found.

Most interestingly, half of these devices (1,110) were never recovered. About three out of five devices were found in mall food courts, while about two out of five were found in restrooms.

While the survey numbers themselves are interesting (they certainly show that a lot of mobile devices get lost at malls), I think there are a few underlying things here that should be examined.

The first is that – surprisingly -- only half of the devices lost were subsequently reclaimed. It’s a reasonable assumption that the owners of the lost devices (which were primarily smartphones and tablets) were less than happy to discover that the device was gone, so the fact that they never claimed them again suggests that they didn’t discover the loss until some time after they left the mall. This is hardly surprising. While tablets are relatively large, most smartphones are easy to misplace and it can very difficult to determine where and when it was lost. 

And, while the inconvenience to the owner was probably considerable, the security implications of this growing tide of lost phones are far greater. More and more users are bringing their own smartphones with them to work and expecting to use them to access email, other online services, and increasingly, The Cloud. Smartphones are, in reality, very powerful small computers, often with large amounts of storage space, that just happen to have a phone attached. And, while these devices may not be as powerful as a laptop, the loss of one can certainly punch a large hole in your organization’s security.

Perhaps the biggest threat comes from the increasing proliferation of “consumerized” Cloud services, especially storage services, such as Dropbox, Box.net and many others. These services provide workers a simple and convenient way to quickly back-up, store and share files. And, most importantly, those same services can be accessed from one of the very powerful, very “loseable” smartphones.

From a local, state or federal agency or department’s perspective, this is a recipe for serious disaster. An employee, using a Cloud service to share files via their smartphone, could accidentally expose sensitive information when they lose that device. Whether the files are actually stored on the device or simply accessible via the smartphone, the agency is faced with the problem of a potential breach occurring as a result of a simple accident.

Ultimately, that’s the real cost of these lost devices -- not the actual hardware itself, but the fact that, more and more, they represent a gateway to almost unlimited Cloud-based services and storage, much of which is difficult to control and secure, and which may leave you and your organization trying to pick up the pieces after a very damaging breach.

Geoff Webb is director of product marketing at Credant Technologies. He can be reached at:

gwebb@credant.com

 

 

Recent Videos

It's been a banner year for the Whitestone Group, according to John Clark, CEO of the facility security, asset/force protection and investigations...
Jeff Horne explains that Denver, CO-based Accuvant , Inc has two different businesses – the Value Added Reseller (VAR) side, in which it is one of...
GSN caught up with Dave Natelson for a quick interview at the Cocktail Reception at the 2011 Awards Dinner, before he learned that Nasatka had earned...
Ann Pickren discusses MIR3’s Mass Notification System that was awarded a Winner’s Trophy in GSN’s 2011 Homeland Security Awards Program. She explains...
Former Coast Guard Commandant Thad Allen, who served through a long and distinguished career in the United States Coast Guard and later answered the...

Upcoming Events

Event Details Dates of Event
SANS Secure India 2012 Feb 20 - 25
The Airport Law Enforcement Symposium Feb 23-24, 2012 Feb 23 - 24
Learn How to Simplify Data Management and Reduce Storage Costs - with Steak & Eggs Feb 23 - 23
Physical Security: Introductory Applications and Technology Feb 27 - Mar 1
Conducting Corporate Investigations Feb 27 - 28
ISC CHINA 2012 (International Security Conference & Exposition CHINA) Feb 27 - 29
RSA Conference 2012 Feb 27 - Mar 2
SAP Public Sector Partner Exchange Feb 28 - 28
SANS Secure Singapore 2012 Mar 5 - 17
SANS Germany 2012 Mar 5 - 10
Homeland Security Finance Forum 2012 Mar 6 - 6
Basic Hands-On CAMEO Training Mar 12 - 14
ASIS Assets Protection Course: Principles of Security (APC I) Mar 12 - 15
SANS Mobile Device Security Summit 2012 Mar 12 - 15
SANS Sec528 Beta 2012 Mar 12 - 17
Aviation Week's Innovation Challenge Showcase Mar 13 - 14
Symantec Government Technology Summit Mar 20 - 20
STI at SANS 2012 Mar 23 - 30
SANS 2012 Mar 23 - 30
The 9th Two Day Conference On Indian Medical Devices & Plastics Disposables Industry 2012 Mar 23 - 24
SANS Northern Virginia 2012 Apr 15 - 20
Active Shooter Apr 18 - 19
SANS AppSec 2012 Apr 24 - May 2
SANS Cyber Guardian 2012 Apr 30 - May 7
Telework Exchange Spring 2012 Town Hall Meeting May 2 - 2
5th Sample Prep - Sample Preparation for Virus, Toxin, & Pathogen Detection & Identification May 3 - 4
SANS Security West 2012 May 10 - 18
SANS Toronto 2012 May 14 - 19
SANS Secure Indonesia 2012 May 14 - 19
Counter Terror Expo US May 16 - 17
CEIC 2012 (Computer and Enterprise Investigations Conference) May 21 - 24
SANS Rocky Mountain 2012 Jun 4 - 9
SANS Malaysia 2012 Jun 18 - 23
Data Center Brainstorm 2012 Jun 19 - 19
SANS Forensics and Incident Response Summit 2012 Jun 21 - 27
Vanguard Security & Compliance 2012 Jun 25 - 28