The danger of mobile viruses

The threat to corporate infrastructures posed by smartphones and PDAs should not be ignored, warns Robert Jaques.

Written by Robert Jaques

Advertisement

The devastating damage that viruses can do to a network of PCs is well understood, and companies have long been protecting against the danger by implementing antivirus applications.

But the explosive and, in corporate terms, largely unmanaged growth of mobile computing threatens to undermine traditional virus protection.

The principal problem comes from the fact that PDAs and smartphones create backdoors into corporate infrastructures that can be exploited by viruses and malicious code to spread infections.

Rob Bamforth, practice leader at Bloor Research's Mobile and Wireless Practice, said that one of the principal security problems associated with mobile devices is that they are typically brought into organisations by individuals who have purchased them independently, rather than being issued as part of an co-ordinated IT department rollout.

This makes them very difficult to control and manage when they are connected to corporate networks.

Bamforth added that, while viruses currently present little danger to the actual mobile handsets themselves, the greatest problem comes from the devices being used as a transmission medium through which viruses could infect company infrastructures.

"There are two main issues with mobile viruses. The first is the danger of the devices itself being infected by a virus specific to its platforms," he said.

"But the other issue, which people tend to gloss over, is the biggest danger. This is the problem of what the mobile devices can upload onto the network.

"It's the danger of a PC virus being uploaded to a corporate network by the mobile device, rather than the device itself being directly attacked.

"This is an area that companies have yet to address properly. There are lots of tools around and there are lots of vendors with smart ideas and products that can address the problems.

"But at the end of the day policy and procedures are what security stands or falls on. The rest of it is just tools, which are useless unless they are implemented properly."

Jack Clark, a member of the AntiVirus Emergency Response Team at security company Network Associates, warned that the danger from mobile viruses, while insignificant at present, is set to grow dramatically as the use of PDAs and smartphones proliferates.

"Where there is new technology, there will be people trying to exploit its weaknesses as well as its strengths," he explained.

"As convergence becomes a reality, and mobile devices are able to house more and more sensitive information, the threat of malicious mobile virus code increases.

"One thing is for certain though: mobile devices and operating systems are firmly on the agenda of virus writers all around the world who relish the challenge of entering the mobile market.

"In order to predict the future we need to look as the past. How many organisations realised the importance of antivirus software after being hit by Melissa?"

Clive Longbottom, strategy analyst at research firm Quocirca, agreed that companies need to be aware of the growing threat from mobile viruses and implement countermeasures.

"There have already been viruses identified that target mobile handsets and there will be a hell of a lot more as smartphones start to take off. For PDAs there have been Palm viruses and also infections on the Microsoft Pocket PC platform," he said.

"As we become more mobile companies are slowly waking up to the threat and are starting to look for antivirus protection for mobiles.

"There are a number of antivirus vendors that have already developed products that protect against this type of threat, but they are not promoting them at the moment as there is little demand."

This view is endorsed by Raimund Genes, president of European operations at antivirus company Trend Micro. He said that there is currently little problem with mobile devices spreading malicious code into enterprise networks because most PDAs and phones have relatively simple operating systems.

But Genes warned that this is changing as the operating systems become more sophisticated, and always-on connections such as GPRS become more common.

"At the moment the operating system in mobile devices is limited and fairly well shielded," he explained. "But there will be more and more demand from the customers for applications. I believe that by 2005 we will have a real problem with viruses on these phones."

According to the 2002 Corporate Wireless Survey conducted by analyst company Yankee Group, security concerns are creating a serious barrier to mobile data adoption for the majority of enterprises.

Eugene Signorini, senior analyst at the Yankee Group, stated: "Sixty-eight per cent of respondents 'somewhat' or 'strongly' agree that security is a barrier to the adoption of wireless data services, reflecting an overall concern within enterprises surrounding security for all information technologies.

"With fixed networks continuing to succumb to security breaches, there is a perception that wireless networks are even more vulnerable to unauthorised access."

Mike Short, chairman of industry body the Mobile Data Association, advised companies to select a professional partner to develop their mobile security and antivirus policies.

"The first challenge is to find the right partner," he said. "When you go from a wired to a wireless local area network you must have specialist help. Most enterprises don't really have the technology depth in-house to achieve this difficult transition."

Tags:

Related whitepapers

Related jobs

Do you agree?

Most commented stories

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

05 Sep 2008

8.64 MBPodcast Special: Views from the Valley More...

Podcast image

04 Sep 2008

12.7 MBComputing podcast 4 September 2008 More...

Podcast logo

02 Sep 2008

8.39 MBEco-Entrepreneur Podcast: Bulldog More...

Poll

INTERNET EXPLORER 8

INTERNET EXPLORER 8

Are you intending to download Internet Explorer 8 when it becomes available?

Previous poll results

Spotlight

LogMeIn Rescue+Mobile

BlackBerry gets LogMeIn remote support

Rescue+Mobile lets a support technician take control of the handset   More...

Dell manufacturing plant

Dell planning factory closures to cut costs

Report claims that PC maker is looking to sell off...  More...

Google Chrome

More growing pains for Chrome

Google wrestles with licensing and security problems   More...

Smartphone

US takes 3G crown from Europe

Americans finally catch up with Europeans in adoption of 3G   More...

Primary Navigation