Mobile Device Management Research Articles

Empirical assessment of mobile device users’ information security behavior towards data breach

Purpose The purpose of this paper is to investigate the information security behavior of mobile device users in the context of data breach. Much of the previous research done in user information security behavior have been in broad contexts, therefore creating needs of research that focuses on specific emerging technologies and trends such as mobile technology. Design/methodology/approach This study was an empirical study that gathered survey data from 390 mobile users. Delphi study and pilot study were conducted prior to the main survey study. Partial Least Square Structural Equation Modeling was used to analyze the survey data after conducting pre-analysis data screening. Findings This study shows that information security training programs must be designed by practitioners to target the mobile self-efficacy (MSE) of device users. It also reveals that practitioners must design mobile device management systems along with processes and procedures that guides users to take practical steps at protecting their devices. This study shows the high impact of MSE on users’ protection motivation (PM) to protect their mobile devices. Additionally, this study reveals that the PM of users influences their usage of mobile device security. Originality/value This study makes theoretical contributions to the existing information security literature. It confirms PM theory’s power to predict user behavior within the context of mobile device security usage. Additionally, this study investigates mobile users’ actual security usage. Thus, it goes beyond users’ intention.

Evaluation of Secure Messaging Applications for a Health Care System: A Case Study.

The use of text messaging in clinical care has become ubiquitous. Due to security and privacy concerns, many hospital systems are evaluating secure text messaging applications. This paper highlights our evaluation process, and offers an overview of secure messaging functionalities, as well as a framework for how to evaluate such applications. Application functionalities were gathered through literature review, Web sites, speaking with representatives, demonstrations, and use cases. Based on similar levels of functionalities, vendors were grouped into three tiers. Essential and secondary functionalities for our health system were defined to help narrow our vendor choices. We stratified 19 secure messaging vendors into three tiers: basic secure communication, secure communication within an existing clinical application, and dedicated communication and collaboration systems. Our essential requirements revolved around functionalities to enhance security and communication, while advanced functionalities were mostly considered secondary. We then narrowed our list of 19 vendors to four, then created clinical use cases to rank the final vendors. When evaluating a secure messaging application, numerous factors must be considered in parallel. These include: what clinical processes to improve, archiving text messages, mobile device management, bring your own device policy, and Wi-Fi architecture. Secure messaging applications provide a Health Insurance Portability and Accountability Act (HIPAA) compliant communication platform, and also include functionality to improve clinical collaboration and workflow. We hope that our evaluation framework can be used by other health systems to find a secure messaging application that meets their needs.

Security Issues with Mobile IT: A Narrative Review of Bring Your Own Device (BYOD).

The use of employee-owned mobile devices such as smart phones, tablets, laptops, etc., to access business enterprise content or networks otherwise referred to as of ‘Bring Your Own Device’ (BYOD) has further made the confidentiality, integrity, and availability of organizations’ data become insecure, and prone to breaches and fraudulent activities. In this study, the authors explored a narrative review that focuses on the theoretical underpinnings of vast works of literature that revealed significant information on the conceptual framework, existing systems that adopt BYOD security, analysis, and synthesis of prior research. Using some keywords “BYOD system security”, “BYOD security threats”, “cyber-attacks and security”, etc., an electronic database search extracted peer-reviewed articles from the last five years. The thematic analysis of fifty-one articles retrieved revealed that breaches and fraudulent activities exist with the use of BYOD that may be perpetrated against organization’s data, intentionally or maliciously. Good policies and guidelines on the use of BYOD coupled with good formulation and communication of same, should be adhered to avert some forms of security breaches. There is the need to preserve user’s privacy, organizations’ data confidentiality, integrity, and availability, and secure same in the devices of employees using their own devices to process corporate and personal data, by using acceptable and effective BYOD Policy and Mobile Device Management Solution (MDMS). This may increase mutual trust and BYOD adoption rate, new innovations and influence that can positively impact the organizations and their employees. Keyword: BYOD, security threats, password, cyber-attacks and security, Information security. DOI : 10.7176/JIEA/8-1-07

Managing Devices of a One-to-One Computing Educational Program Using an IoT Infrastructure.

Plan Ceibal is the name coined in Uruguay for the local implementation of the One Laptop Per Child (OLPC) initiative. Plan Ceibal distributes laptops and tablets to students and teachers, and also deploys a nationwide wireless network to provide Internet access to these devices, provides video conference facilities, and develops educational applications. Given the scale of the program, management in general, and specifically device management, is a very challenging task. Device maintenance and replacement is a particularly important process; users trigger such kind of replacement processes and usually imply several days without the device. Early detection of fault conditions in the most stressed hardware parts (e.g., batteries) would permit to prompt defensive replacement, contributing to reduce downtime, and improving the user experience. Seeking for better, preventive and scalable device management, in this paper we present a prototype of a Mobile Device Management (MDM) module for Plan Ceibal, developed over an IoT infrastructure, showing the results of a controlled experiment over a sample of the devices. The prototype is deployed over a public IoT infrastructure to speed up the development process, avoiding, in this phase, the need for local infrastructure and maintenance, while enforcing scalability and security requirements. The presented data analysis was implemented off-line and represents a sample of possible metrics which could be used to implement preventive management in a real deployment.

Current and Future Trends in Mobile Device Forensics

Contemporary mobile devices are the result of an evolution process, during which computational and networking capabilities have been continuously pushed to keep pace with the constantly growing workload requirements. This has allowed devices such as smartphones, tablets, and personal digital assistants to perform increasingly complex tasks, up to the point of efficiently replacing traditional options such as desktop computers and notebooks. However, due to their portability and size, these devices are more prone to theft, to become compromised, or to be exploited for attacks and other malicious activity. The need for investigation of the aforementioned incidents resulted in the creation of the Mobile Forensics (MF) discipline. MF, a sub-domain of digital forensics, is specialized in extracting and processing evidence from mobile devices in such a way that attacking entities and actions are identified and traced. Beyond its primary research interest on evidence acquisition from mobile devices, MF has recently expanded its scope to encompass the organized and advanced evidence representation and analysis of future malicious entity behavior. Nonetheless, data acquisition still remains its main focus. While the field is under continuous research activity, new concepts such as the involvement of cloud computing in the MF ecosystem and the evolution of enterprise mobile solutions—particularly mobile device management and bring your own device—bring new opportunities and issues to the discipline. The current article presents the research conducted within the MF ecosystem during the last 7 years, identifies the gaps, and highlights the differences from past research directions, and addresses challenges and open issues in the field.

INITIAL DEVELOPMENT, APPLICATION, AND RESULTS FROM A TECHNOLOGY-BASED COGNITIVE REHABILITATION PROGRAMME FOR PEOPLE WITH ALZHEIMER’S DISEASE: THE REACT[1] PROGRAMME

Dementia is a major public health issue worldwide, and at a personal level living with dementia puts severe strain on the lives of people with dementia and caregivers when they need to cope with declining cognitive and functional ability. Consequently, it is vital to move forward acceptable, efficient, and cost-effective solutions to enhance level of function and well-being of people with dementia. Various forms of technology are recognized to have potential to support cognitive and functional ability of people with dementia, e.g. touch-screen technology with easy-to-use mobile applications (apps). A growing number of such dementia friendly apps are being promoted, but the actual implementation and continual use of such technology in everyday life is rarely addressed. This study aims to investigate how a mobile app, delivered on a touch screen device, can be designed to meet the special and individualized needs of people with dementia, and how this technology can be successfully implemented in the daily life of the users. The ReACT app was developed through an iterative innovation process, where people with Alzheimer's disease and caregivers participated in the design, user tests and adaption of the app. The ReACT app is a multi-functionality app supporting memory, structuring and communication in a personalized and adaptable manner. To facilitate the use of technology, a software management tool (Mobile Device Management) has been developed for the touch-screen device, to relieve the users of the often troublesome process of setting up of the device and updating software. The programme of technology-based cognitive rehabilitation was established as a gateway to implementation of the technology in an individualized manner. A proof-of-concept study, including 24 people with early stage Alzheimer's disease, is conducted to investigate the feasibility and applicability of this programme. The study is ongoing. Results will be available in April 2017. This study will give insight into how tailor-made adaptable software technology for people with dementia can be developed through a participatory design process, and how the continued used of this technology can be enhanced through a tailor-made individualized rehabilitation programme.

Disabling Camera Features in a Mobile Phone in Restricted Zones

Objective: To provide a system that is effective in its objective of curtailing the vulnerable camera component access inside the restricted environment. Method: Failure to provide a standardized feature for industry purpose have left them vulnerable to some of the unwanted features in a mobile phone. This means that the mobile phone is able to have all components as a casual user. This maybe a source for the violation of some of the secure company’s policies. It may not be a viable option to deprive the user from possessing a phone with those components. Instead, it is a feasible solution to curb the user from using it in the restricted zone under consideration. Our solution involves a system where there is a well-defined architecture that provides the methods to curtail the vulnerable components. Findings: The method is an add-on on top of the existing solution and is a minimal effort to attempt at providing the necessary secure features for the organization using it. This allows the companies to enforce more productive ideas such as Bring Your Own Device (BYOD) without any concerns. Application: The proposed system effectively adds up to the mobile device management principles and serves the purpose of completely automated security for mobile device.

Supporting Tablet Configuration, Tracking, and Infection Control Practices in Digital Health Interventions: Study Protocol.

BackgroundTablet-based health care interventions have the potential to encourage patient care in a timelier manner, allow physicians convenient access to patient records, and provide an improved method for patient education. However, along with the continued adoption of tablet technologies, there is a concomitant need to develop protocols focusing on the configuration, management, and maintenance of these devices within the health care setting to support the conduct of clinical research.ObjectiveDevelop three protocols to support tablet configuration, tablet management, and tablet maintenance.MethodsThe Configurator software, Tile technology, and current infection control recommendations were employed to develop three distinct protocols for tablet-based digital health interventions. Configurator is a mobile device management software specifically for iPhone operating system (iOS) devices. The capabilities and current applications of Configurator were reviewed and used to develop the protocol to support device configuration. Tile is a tracking tag associated with a free mobile app available for iOS and Android devices. The features associated with Tile were evaluated and used to develop the Tile protocol to support tablet management. Furthermore, current recommendations on preventing health care–related infections were reviewed to develop the infection control protocol to support tablet maintenance.ResultsThis article provides three protocols: the Configurator protocol, the Tile protocol, and the infection control protocol.ConclusionsThese protocols can help to ensure consistent implementation of tablet-based interventions, enhance fidelity when employing tablets for research purposes, and serve as a guide for tablet deployments within clinical settings.

Device-Centric Monitoring for Mobile Device Management

The ubiquity of computing devices has led to an increased need to ensure not only that the applications deployed on them are correct with respect to their specifications, but also that the devices are used in an appropriate manner, especially in situations where the device is provided by a party other than the actual user. Much work which has been done on runtime verification for mobile devices and operating systems is mostly application-centric, resulting in global, device-centric properties (e.g. the user may not send more than 100 messages per day across all applications) being difficult or impossible to verify. In this paper we present a device-centric approach to runtime verify the device behaviour against a device policy with the different applications acting as independent components contributing to the overall behaviour of the device. We also present an implementation for Android devices, and evaluate it on a number of device-centric policies, reporting the empirical results obtained.

A Mobile Service for Assessment Based on a Mobile Device Management System

A Mobile Service for Assessment Based on a Mobile Device Management System

모바일 가상화 TYPE-I을 이용한 보안 기술 연구

Recently, with smart device proliferation and providing the various services using this, they have interested in mobile and Smart TV security. Smartphone users are enjoying various service, such as cloud, game, banking. But today`s mobile security solutions and Study of Smart TV Security simply stays at the level of malicious code detection, mobile device management, security system itself. Accordingly, there is a need for technology for preventing hacking and leakage of sensitive information, such as certificates, legal documents, individual credit card number. To solve this problem, a variety of security technologies(mobile virtualization, ARM TrustZone, GlobalPlatform, MDM) in mobile devices have been studied. In this paper, we propose an efficient method to implement security technology based on TYPE-I virtualization using ARM TrustZone technology.

An Energy Efficient Vehicle to Pedestrian Communication Method for Safety Applications

In vehicular safety applications, vehicles exchange safety messages, which include vehicle's speed, location, and so on. Based on these messages, the safety applications can take appropriate action. In order to increase reliability of the safety message, WAVE standard is being researched. The WAVE standard defines various procedure to support reliable safety message transmission. However, although the standard can support V2V accident avoidance, it overlooks a vehicle-to-pedestrian (V2P) accident since we do not have any support to exchange the safety messages between the pedestrians and vehicles. Nowadays, the pedestrians will be able to exchange the safety messages with vehicles through the mobile devices such as smartphone to avoid the V2P accidents. However, unlike vehicles, the mobile devices are energy-constrained since they work with limited batteries. Moreover, the reliability of the V2V safety applications can be decreased due to collision between safety messages transmitted from the mobile devices. In order to provide energy efficient V2P communication and reduce the collision between safety messages, a group based mobile device management method is required. In this paper, we therefore introduce our V2P accident avoidance scenario and propose energy efficient methods to enable the V2P communication based on Wi-Fi Direct technique which is a promising group-based wireless device management technique.

A Comprehensive Set of Mobile Services Supporting Education Process

Nowadays many universities are using Internet and mobile services to support various activities in education process. However, these services often provide incomplete functionality and are not connected to each other. To address this problem, the paper overviews existing services and requests from students and academic staff members and proposes requirements for a new system. Based on the analysis, the paper proposes a comprehensive set of seven mobile services: attendance monitoring, performance monitoring, timetable management, interactive teaching, testing and exams, course materials, distribution of course tasks and group work. The paper presents architecture of the system based on Mobile Device Management followed by a description of mobile services’ functionality.

Surveillance and Outbreak Response Management System (SORMAS) to support the control of the Ebola virus disease outbreak in West Africa

In the context of controlling the current outbreak of Ebola virus disease (EVD), the World Health Organization claimed that 'critical determinant of epidemic size appears to be the speed of implementation of rigorous control measures', i.e. immediate follow-up of contact persons during 21 days after exposure, isolation and treatment of cases, decontamination, and safe burials. We developed the Surveillance and Outbreak Response Management System (SORMAS) to improve efficiency and timeliness of these measures. We used the Design Thinking methodology to systematically analyse experiences from field workers and the Ebola Emergency Operations Centre (EOC) after successful control of the EVD outbreak in Nigeria. We developed a process model with seven personas representing the procedures of EVD outbreak control. The SORMAS system architecture combines latest In-Memory Database (IMDB) technology via SAP HANA (in-memory, relational database management system), enabling interactive data analyses, and established SAP cloud tools, such as SAP Afaria (a mobile device management software). The user interface consists of specific front-ends for smartphones and tablet devices, which are independent from physical configurations. SORMAS allows real-time, bidirectional information exchange between field workers and the EOC, ensures supervision of contact follow-up, automated status reports, and GPS tracking. SORMAS may become a platform for outbreak management and improved routine surveillance of any infectious disease. Furthermore, the SORMAS process model may serve as framework for EVD outbreak modeling.

Technology Leaders Join Aquatech Innovation Initiative

It is the name of both the company and its geo-spatial platform that can harvest the value of advanced metering infrastructure (AMI) data for utilities of all sizes. The processed information can be used by operators and customers through mobile device management, customer information systems and electronic bill presentment. FATHOM was developed by a water utility and is currently deployed on 4 million meters in the US.

The "Bring your own device" conundrum for organizations and investigators: An examination of the policy and legal concerns in light of investigatory challenges

In recent years, with the expansion of technology and the desire to downsize costs within the corporate culture, the technology trend has steered towards the integration of personally owned mobile devices (i.e. smartphones) within the corporate and enterprise environment. The movement, known as “Bring Your Own Device” (hereinafter referred to as “BYOD”), seeks to minimize or eliminate the need for two separate and distinct mobile devices for one employee. While taken at face value this trend seems favorable, the corporate policy and legal implications of the implementation of BYOD are further complicated by significant investigatory issues that far outweigh the potential benefits of integrating a BYOD policy. In this paper we first set a context for the BYOD conundrum, then examine associated corporate policies, highlight the limitations to the digital investigator’s reach regarding digital evidence and review the investigatory challenges presented to the involved parties (such as the forensic examiner) from a BYOD environment. We conclude by offering recommendations such as implementing finely crafted policies and procedures (such as incident response), utilizing Mobile Device Management and other software, corporate owned devices, and enforcing signed agreements.

Основні принципи та правила впровадження Mobile device management і bring your own device у роботу сучасного підприємства

Main principles and rules of implementation of Mobile Device Management (MDM) і Bring Your Own Device (BYOD) to nowadays business were described. Conditions of prevention confidential information leakage caused by using mobile devices were analyzed. Appointment and settings of security parameters and main opportunities of McAfee and Websense software during using of mobile devices in corporative network were explored.

Hardware Acceleration of SQL-Queries Processing in MDM-Systems Based on MISD-Solution

In this article we examine the possibility of hardware support for functions of mobile device management platform (MDM-platform) using a Multiple Instructions and Single Data stream computer system, developed within the framework of the project in Bauman Moscow State Technical University. At the universities the MDM-platform is used to provide various mobile services for the faculty, students and administration to facilitate the learning process: a mobile schedule, document sharing, text messages, and other interactive activities. Most of these services are provided by the extensive use of data stored in MDM-platform databases. When accessing the databases SQL- queries are commonly used. These queries comprise operators of SQL-language that are based on mathematical sets theory. Hardware support for operations on sets is implemented in Multiple Instructions and Single Data stream computer system (MISD System). This allows performance improvement of algorithms and operations on sets. Thus, the hardware support for the processing of SQL-queries in MISD system allows us to benefit from the implementation of SQL-queries in the MISD paradigm. The scientific novelty of the work lies in the fact that it is the first time a set of algorithms for basic SQL statements has been presented in a format supported by MISD system. In addition, for the first time operators INNER JOIN, LEFT JOIN and LEFT OUTER JOIN have been implemented for MISD system and tested for it (testing was done for FPGA Xilinx Virtex-II Pro XC2VP30 implementation of MISD system). The practical significance of the work lies in the fact that the results of the study will be used in the project Development of the Russian analogue of the system software for centralized management of personal devices and platforms in enterprise networks of the St. Petersburg Polytechnic University (with the financial support of the state represented by the Ministry of Education and Science of the Russian Federation). In this study, we have conducted the testing on the basis of data structures obtained during the approbation of MDM-platform in SPbPU. Test results have shown that on average MISD system provides a two-fold gain for SQL-operators such as INNER JOIN and LEFT JOIN. However, it was found that MISD system does not give gain in cycles for SQL-operator LEFT OUTER JOIN. A comparison was carried out with the processing of requests on Intel Core 2 Duo. The results of this work are areas of further development and improvement of MISD system, including the area of hardware support for new operations.

모바일 가상화 기술과 ARM의 Trustzone을 사용한 효율적인 보안 방법

최근, 스마트폰의 사용자 수는 스마트폰 성능 향상 및 다양한 서비스 제공으로 인해 매우 빠르게 증가하고 있다. 스마트폰 사용자들은 클라우드 서비스, 게임, 뱅킹 서비스, 모바일 서비스 등의 다양한 서비스를 사용한다. 오늘날의 모바일 보안 솔루션은 악성코드를 검출하거나 모바일 장치를 관리하는 수준에 그치고 있다. 이에 인증서, 법인 문서, 개인의 신용 카드 번호와 같은 보안에 민감한 정보에 대해 서비스 해킹 및 누설을 방지하는 기술이 필요하다. 모바일 보안 기술은 피해가 발생한 사례가 있었던 만큼 최근에 관심이 증가하고 있다. 이러한 문제를 해결하기 위해서 모바일 가상화, ARM Trustzone, Globalplatform과 같은 다양한 모바일 장치의 보안 기술이 연구되었다. 따라서 본 논문에서는 정보 유출 및 해킹을 방지하기 위한 인증, 보안 정책 및 액세스 제어, 암호/키 관리, 세이프 스토리지 등의 모바일 가상화 기술과 ARM의 Trustzone의 효율적인 방법을 제안한다. Today, a number of users using smartphone is very rapidly increasing by development of smartphone performance and providing various services. Also, they are using it for enjoying various services(cloud service, game, banking service, mobile office, etc.). today's mobile security solution is simply to detect malicious code or stay on the level of mobile device management. In particular, the services which use sensitive information, such as certificate, corporation document, personal credit card number, need the technology which are prevented from hacking and leaking it. Recently, interest of these mobile security problems are increasing, as the damage cases been occurred. To solve the problem, there is various security research such as mobile virtualization, ARM trustzone, GlobalPlatform for mobile device. Therefore, in this paper, I suggested efficient method that uses the mobile virtualization techniques of certification, security policy and access control, password/key management, safe storage, etc. and Trustzone of ARM for preventing information leakage and hacking.

모바일 어플리케이션 개발에서의 보안성 향상을 위한 보안 점검항목 개선에 관한 연구

Abstract The use of mobile devices offers a variety of services to the individuals and companies. On the other hand, security threats and new mobile security threats that exist in IT infrastructure to build the environment for mobile services are present at the same time. Services such as mobile and vaccine management services, such as MDM (Mobile Device Management) has attracted a great deal of interest in order to minimize the threat of security in mobile environment. These solutions can not protect an application that was developed for the mobile service from the threat of vulnerability of mobile application itself. Under these circumstances, in this paper, we proposed mobile application security checklists based on application security review items in order to prevent security accidents that can occur in a mobile service environment. We collected and analyzed Android applications, we performed a total inspection of the applications for verification of the effectiveness of the check items. And we checked that the check items through a survey of experts suitability was verified.