Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FUNDAMENTALS GUIDE Spezifikationen Seite 5
- Seite / 39
- Inhaltsverzeichnis
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
Attack Surface Analysis of BlackBerry Devices
Introduction
The BlackBerry device and supporting platform are developed by Research In Motion (RIM), a Canadian soft-
ware and hardware company based in Waterloo, Ontario. One of the BlackBerry's main selling points is that
it provides an integrated wireless messaging system, providing push email access over cellular wireless net-
works throughout the world. Another major factor in the BlackBerry's popularity is its comprehensive and
systematic approach to security. BlackBerry devices are versatile, and can be used for a range of functions
including telephony, SMS, email, and Web browsing amongst other things.
BlackBerry users can generally be divided into two camps: consumers who bought and own their BlackBerry,
and enterprise end-users who are given the use of a BlackBerry by their employers. Consumer devices are
generally configured to use BlackBerry Internet Service (BIS), while enterprise devices are generally config-
ured to use BlackBerry Enterprise Server (BES). In a BIS environment, the end-user is generally responsible
for the appropriate configuration of security measures. In a BES environment, the end-user has a certain
amount of control, but security is usually enforced by the enterprise, via the use of an IT Policy and
Application Controls. More comprehensive controls are available in a BES deployment than in a BIS deploy-
ment, and the default configuration of an enterprise device is generally more constrained than the equiva-
lent consumer deployment of that device (for example, the firewall is enabled by default). See the Mitigation
section for more details.
While the BlackBerry solution has a comprehensive inbuilt security framework at both device and server
level it is still susceptible to a number of potential attacks. These attacks vary in the degree to which the
user is involved but include, the device being backdoored, allowing confidential data to be exported from
the device and the device being used as a proxy for attackers
8
. Some of these attacks require applications
to be digitally signed thus limiting their likelihood, while others can be conducted by unsigned code.
However none of the attacks are purely autonomous with all requiring the user to be convinced to perform
a number of actions in order to be successful. Also, the viability of such attacks depends largely on the con-
figuration of existing controls on the BlackBerry device: i.e. Firewall, Application Control and IT Policy setup.
Using these available security mechanisms greatly reduces the risks associated with the attacks outlined
herein.
This document will present an attack surface analysis of the BlackBerry device; this analysis will include a
high-level review of architecture and related application attack scenarios. This research will distinguish
what can be done with signed versus unsigned code throughout the document. All observations are based
on a default retail configuration unless otherwise stated.
This research is based on a retail BlackBerry Pearl 8100 from network operator O2 Ireland
15,16
, with version
4.2 of the BlackBerry Software and BIS, but should be applicable to most modern BlackBerry models. Note
that BlackBerry devices can be customised by network operators and vendors before they are sold to users.
These changes are usually just cosmetic, but can include modification of MIDP permissions. This customiza-
5
- Attack Surface 1
- Analysis of 1
- BlackBerry Devices 1
- Introduction 5
- Architecture Overview 6
- Modifying Signed Applications 7
- Malicious Code Signing 7
- Mitigation Strategies 8
- BIS Deployment 8
- BES Deployment 10
- Attack Surface Analysis 13
- JAD Files 14
- Mitigation 15
- File System 15
- Persistent Storage 15
- J2ME File System 16
- USB Mass Storage 16
- Memory and Processes 17
- SMS (Short Message Service) 18
- Premium Rate Scam 18
- SMS Interception 19
- SMS Backdoor 20
- Bluetooth 21
- Bluetooth Backdoor 21
- Bluetooth Worms 21
- Email Interception 22
- Backdoor 22
- Data Theft 25
- TCP/IP Connections 25
- Proxy/Firewall Bypass 26
- Port Scan 27
- HTTP / WAP 28
- HTTP Proxy 29
- Telephony 30
- Call Record Monitoring 31
- Premium Rate Calls 31
- Telephony Data Theft 32
- Conclusions 33
- Appendix A 35
- References 36
Verwandte Produkte und Handbücher für Software Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FUNDAMENTALS GUIDE
Software Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE - - RELEASE NOTES Bedienungsanleitung
(11 Seiten)
(11 Seiten)
Software Blackberry PROFESSIONAL SOFTWARE FOR IBM LOTUS DOMINO - - RELEASE NOTES Bedienungsanleitung
(12 Seiten)
(12 Seiten)
(6 Seiten)
Software Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE - - RELEASE NOTES Bedienungsanleitung
(11 Seiten)
(11 Seiten)
(46 Seiten)Metrohm 930 Compact IC Flex Oven/SeS/PP/Deg podręczniki
Instrukcje obsługi i podręczniki użytkownika dla Ekwipunek Metrohm 930 Compact IC Flex Oven/SeS/PP/Deg.
Dostarczamy 4 pdf podręczników Metrohm 930 Compact IC Flex Oven/SeS/PP/Deg do pobrania za darmo według typów dokumentów: Instrukcja Użytkownika
Metrohm 930 Compact IC Flex Oven/SeS/PP/Deg Instrukcja Użytkownika (132 strony)
Marka: Metrohm | Kategoria: Equipment | Rozmiar: 9.69 MB |
Spis treści
4 Manejo
73
5.12 Supresor
100
￭￭￭￭￭￭￭￭
101
Suppressor (MCS)
109
7.4 Carcasa
121
7.10 Supresor
123
7.12 Metrohm CO
124
7.13 Detector
124
7.16 Interfaces
125
8 Garantía
127
9 Accesorios
129
Metrohm 930 Compact IC Flex Oven/SeS/PP/Deg Instrukcja Użytkownika (124 strony)
Marka: Metrohm | Kategoria: Equipment | Rozmiar: 9.66 MB |
Spis treści
2.2 Rear
18
4 Operation
69
￭￭￭￭￭￭￭￭
100
Suppressor (MCS)
103
7.4 Housing
114
7.5 Leak sensor
114
7.6 Column oven
114
7.10 Suppressor
116
7.12 Metrohm CO
116
7.13 Detector
117
7.16 Interfaces
117
9 Accessories
121
Metrohm 930 Compact IC Flex Oven/SeS/PP/Deg Instrukcja Użytkownika (128 strony)
Marka: Metrohm | Kategoria: Equipment | Rozmiar: 9.69 MB |
Spis treści
4 Maniement
72
￭ Pincette
94
￭￭￭￭￭￭￭￭
100
Suppressor (MCS)
106
7.2 Appareil
117
7.4 Boîtier
118
7.9 Suppresseur
120
7.11 Metrohm CO
120
7.12 Détecteur
121
7.15 Interfaces
121
8 Garantie
123
9 Accessoires
125
Metrohm 930 Compact IC Flex Oven/SeS/PP/Deg Instrukcja Użytkownika (126 strony)
Marka: Metrohm | Kategoria: Equipment | Rozmiar: 9.68 MB |
Spis treści
1 Einleitung
11
4 Bedienung
71
￭ Pinzette
93
￭￭￭￭￭￭￭￭
100
5.14 Metrohm CO
105
5.17 Trennsäule
107
7.4 Gehäuse
116
7.5 Lecksensor
116
7.6 Säulenofen
116
7.10 Suppressor
118
7.12 Metrohm CO
118
Suppressor (MCS)
118
7.13 Detektor
119
9 Zubehör
123
Więcej produktów i instrukcji dla Ekwipunek Metrohm
| Modele | Rodzaj dokumentu |
|---|---|
| tiamo 2.2 Installation |
Instrukcja Użytkownika
Metrohm tiamo 2.2 Installation Benutzerhandbuch,
14 strony
|
| 930 Compact IC Flex Oven/ChS |
Instrukcja Użytkownika
Metrohm 930 Compact IC Flex Oven/ChS Manuel d'utilisation,
45 strony
|
| 854 iConnect |
Instrukcja Użytkownika
Metrohm 854 iConnect Benutzerhandbuch,
2 strony
|
| 753 Suppressor Module |
Instrukcja Użytkownika
Metrohm 753 Suppressor Module User Manual,
47 strony
|
| tiBase 1.0 Installation |
Instrukcja Użytkownika
Metrohm tiBase 1.0 Installation User Manual,
7 strony
|
| 896 Professional Detector – Conductivity & Amp |
Instrukcja Użytkownika
Metrohm 896 Professional Detector – Conductivity & Amperometry Manual del usuario,
69 strony
|
| MagIC Net Empower Driver |
Instrukcja Użytkownika
Metrohm MagIC Net Empower Driver User Manual,
5 strony
|
| 838 Advanced Sample Processor Installation Instruc |
Instrukcja Użytkownika
Metrohm 838 Advanced Sample Processor Installation Instructions User Manual,
109 strony
|
| 872 Extension Module |
Instrukcja Użytkownika
Metrohm 872 Extension Module Manual del usuario,
86 strony
|
| 901 Titrando |
Instrukcja Użytkownika
Metrohm 901 Titrando Benutzerhandbuch,
67 strony
|
| TitrIC 3 |
Instrukcja Użytkownika
Metrohm TitrIC 3 User Manual,
16 strony
|
| 832 KF Thermoprep |
Instrukcja Użytkownika
Metrohm 832 KF Thermoprep Manuel d'utilisation,
37 strony
|
| 815 Robotic USB Sample Processor XL |
Instrukcja Użytkownika
Metrohm 815 Robotic USB Sample Processor XL User Manual,
114 strony
|
| NIRS XDS Interactance OptiProbe Analyzer |
Instrukcja Użytkownika
Metrohm NIRS XDS Interactance OptiProbe Analyzer User Manual [en] ,
95 strony
|
| 930 Compact IC Flex ChS/Deg |
Instrukcja Użytkownika
Metrohm 930 Compact IC Flex ChS/Deg User Manual,
107 strony
|
| 872 Extension Module Sample Prep |
Instrukcja Użytkownika
Metrohm 872 Extension Module Sample Prep Manual del usuario,
45 strony
|
| 895 Professional PVC Thermomat |
Instrukcja Użytkownika
Metrohm 895 Professional PVC Thermomat Benutzerhandbuch,
51 strony
|
| 930 Compact IC Flex SeS/Deg |
Instrukcja Użytkownika
Metrohm 930 Compact IC Flex SeS/Deg Benutzerhandbuch,
50 strony
|
| tiamo 2.0 Manual |
Instrukcja Użytkownika
Metrohm tiamo 2.0 Manual Benutzerhandbuch,
1550 strony
|
| 766 IC Sample Processor |
Instrukcja Użytkownika
Metrohm 766 IC Sample Processor User Manual,
143 strony
|
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.030 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern