The Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
summary
Claim: enterprise perimeter assumptions no longer hold because employee phones and IoT talk to cloud services, public networks and chargers. Demonstrations include a QR-code poisoned app dropped on a building that installs a tampered app, a jailbreak to steal keychain technique that gains kernel access and exfiltrates credentials, and proof that malicious charging station or rogue cell tower attacks can deliver remote code. Shows MDM/EMM gaps, how mobile threat defense now detects read/write partition jailbreaks, and recommends continuous pen testing, inventory, monitoring and risk-based segmentation.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:00Overview
- 1:12Enterprise Cyber Security - Current Paradigm
- 6:51Mobile Threat Model
- 11:17Mobility Architecture
- 17:21Eco-System
- 18:53Social Engineering
- 22:44A brief refresher on OS architectures
- 25:03What's at Risk - Impact
- 28:34System Isolation
- 30:54Mobile Device Management
- 34:03Enterprise Mobility Management
- 36:46Mobile Application Management
- 38:57End Point Protection
- 42:43Mobile Threats Revisited
- 43:09What's Missing?
- 46:37Monitor Mobility
related talks
49mThe Perimeter Has Been Shattered
40mIntegrating Mobile Devices into your Penetration Testing Program
39mBad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions
37mEnterprise Apps: Bypassing the IOS Gatekeeper
34mManaging the Mobile Endpoint Attack Surface
18mYour Enterprise is Under Attack
39mDilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
48mMobile Device Mismanagement