06 October 2010 | 11,379 views

Symantec Expands Security Products To Cover Android & iOS

Acunetix Web Application Security

Most of the big companies in the modern age of business are moving to the acquisition model rather than developing new technologies, Symantec has made a few purchases in recent years.

Their latest move is to offer security for the hot smartphone platforms Android and iOS, which powers the new iPhone 4 and iPad. The most recent security flaw on Android was due to an exploit in Flash that could be used to compromise the system.

They can move into this area with the expertise from their purchase of VeriSign earlier this year. They already have mobile security support for Symbian, BlackBerry and Windows Mobile.

Symantec is extending its support of smartphone platforms in a bid to make its security and management technology as ubiquitous in the mobile world as it is on the desktop. The security giant announced added support for Android and Apple iOS platforms to its mobile security and management portfolio during the opening of its Symantec Vision conference in Barcelona today. This is in addition to existing support for Windows Mobile, Symbian and BlackBerry smartphones

The technology covers functions such as device security, encryption and authentication. Password policy enforcement, remote wipe and device inventory functions are also included in enterprise versions of the software.

VeriSign Identity Protection (VIP) Access for Mobile, PGP Mobile and Symantec Endpoint Protection Mobile Edition are the three main products in Symantec’s push to sell both enterprises and service providers on its ability to minimise problems such as mobile network misuse, malware proliferation and spam. The enterprise versions of the product are available immediately, with the telecoms carrier versions coming online next quarter. Symantec paid $1.3bn to buy VeriSign in May and intends to make good of this investment with increased sales in mobile technology.

I’d say those users who have security problems on the iOS platform are most commonly those have executed some kind of jailbreak on the device. The most memorable of course being the rickrolling of users, which was shortly followed by a malicious version of the worm.

From what I know though with a correct implementation of BES aren’t BlackBerry users already covered on all these fronts? And as for iOS as long as it hasn’t been jailbroken and it’s using Mail for Exchange I don’t see any danger.

Same goes for Android, as long as it’s not rooted..it should be safe.


The payment by phone concept has been kicking around the IT industry for some years. It’s an appealing idea but many pieces need to fall in place to realise the vision. Handset manufacturers, mobile telcos, payment providers, banks and retailers all need to be on board – quite apart from the security piece, which Symantec is in as good a place as anyone in the security market to supply.

Salem acknowledged the difficulty of the IT industry as a whole to make the e-wallet concept a reality. Symantec’s strategy is to focus on building bilateral relationships, starting with a small number of retailers and payment providers. “There’s not going to be one ID for the internet,” Salem said. “The idea that there will be one authoritative service is far-fetched. It’s not going to happen.”

Symantec also wants to persuade consumers to buy Norton Mobile Security for Android, possibly in extension to existing desktop versions of Symantec’s consumer-focused security software, to tackle the yet-to-emerge threat of malware capable of infecting Android devices. While it’s true that a couple of SMS Trojans infecting Android smartphones have appeared in Russia, the problem is minuscule compared to the hundreds of thousands of strains of Windows-specific worms, Trojan, viruses, rootkits and botnet agents that have been the mainstay of the security threat landscape for many years.

What I really don’t need is another process swallowing up cycles on my 600mhz mobile processor. As the desktop market is pretty saturated I’d expect to see more security companies coming out with solutions for mobile platforms.

The smartphone market is exploding right now so I’m pretty sure bad things will start to happen soon enough.

Source: The Register





                

Recent in Countermeasures:
- Sandboxie – Sandbox Your Browser / Software / Programs In Windows
- AxCrypt – Open Source Windows File Encryption Software
- Smooth-Sec – IDS/IPS (Intrusion Detection/Prevention System) In A Box

Related Posts:
- Sophos Offers Free Android Antivirus App
- French Company Intego Release First iPhone Malware Scanner
- Android Malware App Covertly Makes Purchases On China Mobile Market

Most Read in Countermeasures:
- AJAX: Is your application secure enough? - 118,944 views
- Password Hasher Firefox Extension - 116,821 views
- NDR or Backscatter Spam – How Non Delivery Reports Become a Nuisance - 57,520 views

Low-cost VPS Hosting

2 Responses to “Symantec Expands Security Products To Cover Android & iOS”

  1. Firehawke 7 October 2010 at 8:00 pm Permalink

    Absolutely not true. There was a recent PDF exploit on IOS that could allow for a complete takeover of the phone. I don’t know if any exploit code was generated outside of the jailbreak that used it, but it easily could have turned ugly.

    It’s really surprising that there haven’t been MORE attacks on these architectures considering the growth in the userbase over the last few years.

    Just because a device isn’t jailbroken doesn’t mean there’s not a huge security hole lurking somewhere in there for a virus or other malware to infect.

    • Darknet 8 October 2010 at 8:55 am Permalink

      That’s true indeed, forgot about the whole jailbreakme.com thing which did work on phones that hadn’t been jailbroken.

      But yah, I’d expect to see more attacks and more ‘software security solutions’ for mobile platforms popping up.