MOBILE FORENSICS AND SECURITY

Size: px

Start display at page:

Download "MOBILE FORENSICS AND SECURITY"

Brianna Bennett
6 years ago
Views:

1 DHS S&T CYBER SECURITY DIVISION 2014 Cyber Security Division R&D Showcase MOBILE FORENSICS AND SECURITY NowSecure Andrew Hoog December 16, 2014

2 Mobile Devices Are Complicated Average Android Device 300 APPS INSTALLED 160 IP ADDRESS CONNECTIONS A DAY 77% DEVICES NOT UPDATED TO LATEST OS

3 Mobile Malware Is Not the Problem Data from 127,000 NowSecure mobile users 35% 50% OF APPS SEND UNENCRYPTED DATA OF U.S. DEVICES CONNECT TO INSECURE WI-FI 65% OF APPS HAVE AT LEAST 1 HIGH RISK SECURITY FLAW

4 The Mobile Problem Mobile devices contain sensitive data and are vulnerable to attacks VULNERABILITIES System Configuration App Network PERSONAL DATA CORPORATE DATA

5 Our History Launched as viaforensics NAND Flash Forensics for SBIR I 2014 Rebranded as NowSecure with focus on mobile device security

6 Forensics is in our DNA

Comprehensive Mobile Security Platform Endpoint Protection App Testing Forensics Our Research Team

8 NAND Flash Forensics SBIR Phase I POC NAND Flash Write Blocker Forensically sound recovery Targeted early Android devices Benefits Admissibility in court Recovery of deleted data Detect insecure data storage

9 NowSecure Forensics Suite DHS -Funded Capabilities Android and ios (soon) Automated rooting Burner phone forensics JTAG training 3rd party app decoding Global search Timeline

Aggregated view of mobile risk Visibility into apps, data

10 Endpoint Protection NowSecure Mobile App Mobile user first Turns individuals into front line of security NowSecure BYOD Aggregated view of mobile risk Visibility into apps, data flow and networks Security score to drive access and policy decisions

testing On-premise deployment Roadmap Cloud & API enabled

11 NowSecure App Testing Suite Features Static and dynamic analysis Analyst driven with automation Unlimited app testing On-premise deployment Roadmap Cloud & API enabled Continuous integration support Enterprise server Malware analysis

NowSecure Mobile App NowSecure App Testing Suite NowSecure Forensics Suite Our Research Team Mobile Intelligence Network Device, System, and Configuration Intel Global view of devices, configs, apps

12 NowSecure Mobile App NowSecure App Testing Suite NowSecure Forensics Suite Our Research Team Mobile Intelligence Network Device, System, and Configuration Intel Global view of devices, configs, apps & can filter by country or customers App Intel Static and dynamic mobile app analysis by crawling app markets and installed apps Network Intel Data flow to countries/ org by app, protocol analysis and network security data. Forensic Intel Success/failure of mobile exploits, device coverage and app decoding.

13 Data from 188 Countries United States 26.89% Iran 22.78% Netherlands 4.58% United Kingdom 3.80% India 3.63% Italy 2.49% Brazil 2.33% Germany 2.21% Belgium 2.16% Canada 1.97% Thailand Australia Indonesia Estonia Malaysia Russian Federation Japan Spain Mexico United Arab Emirates 1.80% 1.52% 1.40% 1.21% 1.18% 1.12% 0.91% 0.75% 0.75% 0.66%

During the Hong Kong Protest, we detected a

China-allocated IP addresses not belonging to

14 During the Hong Kong Protest, we detected a significant amount of DNS poisoning Twitter Facebook Yahoo Rerouted to Korea-allocated IP address not belonging to Twitter Rerouted to China-allocated IP addresses not belonging to Facebook Rerouted to Russia-allocated IP address not belonging to Yahoo

15 Competitive Analysis

16 Status of Our Technology M+ BOOKS 1B+ GLOBAL ENTERPRISE CUSTOMERS VULNERABILITIES FOUND IN APP > 1M INSTALLS DEVICES IMPACTED Android Forensics 276,295,200 CUSTOMERS PROTECTED iphone and ios Forensics 127,000 MOBILE APP DOWNLOADS Android Security Cookbook 188 Android Hacker s Handbook COUNTRIES Hacking and Securing ios Applications

17 Test Our Products EVALUATE APP TESTING SUITE EVALUATE FORENSICS SUITE PILOT NOWSECURE BYOD Free Community Edition Free Burner Phone & Community Edition Free For Individuals Static & Dynamic App Testing Automated rooting Simple Cloud & App/Play Model Custom Or 3rd Party Apps Global search Visibility Across BYOD & Customers

18 Our Differentiators Turn mobile users into the front line of mobile security Comprehensive platform rather than a point solution Trusted experts and vendor to large enterprise customers Enterprise ready with on-premise & SaaS deployments Established relationships in federal market

Customers want to transform their datacenter 80% 28% global IT budgets spent on maintenance. time spent on administrative tasks

Customers want to transform their datacenter 80% global IT budgets spent on maintenance 28% time spent on administrative tasks Cloud is a new way to think about your datacenter Traditional model Dedicated