Re: PDA's/Blackberrys: risk to networksL

Paul:

That depends. I would need to know these things

A) What email programs do these PDAs use?
B) What operating system do the PDAs use?


Viruses are tranferred in a couple of ways

1: through some type of attachment that is clicked on

2: through an attachment that is not clicked on and loaded automatically (via active X or javascript or some other scripting language)

3: visiting specific places on the internet, like a web page, and then through javascript automatically in the background

After they get on your PDA, depending on what your email program is, and depending on what operating system the PDAs run on, will show you how they are transferred from computer to computer and what they actually will do.

Let me know those factors and I can give you an assement as well as easy ideas to implement to protect yourself better.

Kelly Sigethy
Frynge.com
http://www.frynge.com


----- Original Message ----- From: "Chinnery, Paul" <PaulC@xxxxxxxxx>
To: <security-basics@xxxxxxxxxxxxxxxxx>
Sent: Thursday, October 19, 2006 1:51 PM
Subject: PDA's/Blackberrys: risk to networksL


Some of our directors are bringing in PDA's like Palms and using them to sync up with their email. Since virus writers and mailicious hackers are targeting these devices, we are wondering what the security impact is on networks
Can viruses be transmitted easily between PDA and the network machine they connect to?
Could a key logger prg or other malicious prg be easily transferred?
We're a small, rural hospital and although I keep pretty current on security issues I haven't see much on this forum or other security related forums which is why I am asking the group for their opinions.
BTW, we're a W2K shop with W2K Pro and XP sp2 computers using Exchange2K and SQL.

Paul Chinnery
Network Administrator
Memorial Medical Center


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: [fw-wiz] REXX
    ... >> that enhances security because he's a moron. ... > to even credit card sized tokens as I recommend ... > trying to defeat the cost issue with old PDAs, ... If you are not the intended recipient please notify the sender ...
    (Firewall-Wizards)
  • Re: about SecuriID on mobile devices
    ... idea of tokens is that they are uncopyable, ... Any system like SecurID has to suffer from the same security problems, it must be trivial to copy the secret. ... Many PDAs available today, and the major of PDAs sold, have a smartcard built into them, its called a SIM card and is related to the phone functionality that has become necessary. ...
    (sci.crypt)
  • Re: OWA
    ... By changing from domain.com/exchange to ip/exchange we can get to OWA on ... one of the PDAs and log in OK. ... the possibility exists that those security issues may merit other ... impact the ability of ppc devices to communicate through the same pipes. ...
    (microsoft.public.pocketpc)
  • Lost data horror stories?
    ... I'm writing an article on PDAs and security and would be interested in ... hearing from anyone who has lost their PDA or had it stolen. ... Were you using security software? ...
    (microsoft.public.pocketpc)