Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FUNDAMENTALS GUIDE Spezifikationen PDF herunterladen (Seite 20)

Attack Surface Analysis of BlackBerry Devices

SMS Backdoor

A signed malicious application could use SMS as a command and control channel for a backdoor. It could

send and receive messages; steal or modify sensitive data and open TCP/IP connections.

Incoming SMS messages could be monitored for keywords or a particular originating phone number. These

messages could then be interpreted as commands to perform a variety of actions on behalf of the attacker.

These actions would still be subject to the same constraints as any action carried out by an application.

Therefore the user would still be prompted in the usual manner before sensitive actions could be carried

out, and the set of possible actions would be governed by whether the malicious application was signed or

not, as well as any Application Permissions or Device Firewall which may be in place.

Mitigation

You can set the following options to mitigate the attacks outlined above. See Mitigation Strategies for more

information.

Premium Rate Scam

SMS Interception

SMS Backdoor

IT Policy "Allow SMS" = False

Application Controls "External Network Connections" = Not Permitted

Device Firewall Status = Enabled

Application Permissions Connections > Carrier Internet = Deny

IT Policy "Allow SMS" = False

"Firewall Block Incoming Messages" = True

Application Controls "External Network Connections" = Not Permitted

Device Firewall Status = Enabled

"Block Incoming Messages" > SMS = Ticked

Application Permissions Connections > Carrier Internet = Deny

IT Policy "Allow SMS" = False "

Firewall Block Incoming Messages" = True

Application Controls "External Network Connections" = Not Permitted

Device Firewall Status = Enabled

"Block Incoming Messages" > SMS = Ticked

Application Permissions Connections > Carrier Internet = Deny

1 2 ... 15 16 17 18 19 20 21 22 23 24 25 ... 38 39

Keine Kommentare

Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FUNDAMENTALS GUIDE Spezifikationen Seite 20