Making Mobile Security Easier and More Convenient

This week of National Cyber Security Awareness Month is dedicated to mobile, a topic that probably had a lot less emphasis 10 years ago when NCSAM started and pre-iPhone days.

This week of National Cyber Security Awareness Month is dedicated to mobile, a topic that probably had a lot less emphasis 10 years ago when NCSAM started and pre-iPhone days.

But today, mobile security is highly relevant and should be top-of-mind. In a PayPal national study, more than 67 percent of respondents are very or somewhat concerned that their data would be compromised if they lost their mobile device.

Today’s NCSA tweet chat had a lot of folks talking about strong passwords.  And I agree. Strong passwords are our first line of defense (strong authentication should also be considered, but that’s for another time). Strong passwords often mean long passwords (in fact, long passwords were mentioned in the tweet chat).  But is that practical on a mobile device? Will users do it? Apple must not think so since they’ve added biometrics to their security mix. From the tweet chat:

PayPal National #Onlinesafety Study found only 34% lock their #mobile phone w/a PIN.

So I’m thinking convenience might be a factor here.

Let’s extend that to apps. If typing a PIN is not convenient for 66% of mobile users, then do you think they will want to type a strong  password for every app (consider enterprise use here)?

Take a look at this blog, Mobile SSO: Give App Users a Break from Typing Passwords, from Leif Bildoy, a colleague who joined CA Technologies from the Layer 7 acquisition. Or for a shortcut, here’s a Webcast where Leif and Tyson Whitten, also on the CA Security team, discuss Mobile SSO: https://www.brighttalk.com/webcast/7845/84845.

Stay tuned for more to come from CA Technologies in the mobile world as we continue to expand our footprint in mobile management and security.

Written by

Leanne Agurkis

Leanne Agurkis has spent more than 20 years in the communications field. She has worked…

Published in

Security

View this topic
  • James Holland

    This is great. Hooray for Disney’s imagineers!

  • http://www.sheistocktips.com/ SHRISTOCKTIPS

    SHRISTOCKTIPS has
    become a new brand in the share market research with its accurate research. Proven
    itself always right whether market is bull or bear. Last week all paid clients
    booked handsome profit in NIFTY, BANKINIFTY & STOCKS. Now for the coming
    week we expect more correction can come in NIFTY as the IRAQ issue is getting
    more tense, If it happens more then you will see a sharp fall in all world marketNSE BSE, STOCK TIPSbecause as we know all world run on
    crude & most of the crude comes from IRAQ. So be ready for a sharp fall so
    sell will be the best strategy for next week also. Traders can make a sell
    position in NIFTY around 7600-7650 with stoploss 7750 for the target of
    7300-7200.One can also make a sell call NIFTY 50 stocks as per NIFTY levels. You
    can also take our two days free trial to check our accuracy. For further updates
    you can visit our website. http://goo.gl/sMgZ7n

    Regards

    SHRISTOCKTIPS TEAM

  • king lear

    testing comment functionality, please do not publish this

  • http://www.rachelmacik.com Rachel Macik

    Love the personal pic :)

    • CAHighlight

      Thank you!

  • Plutora Inc

    This is a good case study. 2.3 sec’s off a login transaction is big.

  • http://www.linkedin.com/in/michelehudnall Michele Hudnall

    While the analysts were hyping DevOps, I posted the oversight of not including security as part of that discussion as you are highlighting here. Instead of just talking DevOps, it should be DOS (what’s old is new again :-) – DevOpsSec. As a previous AppDev person, it’s the app, who’s using it, why and where rather than the device and having the service available.

    As you rightly point, out Security should be baked into the solution.
    https://www.netiq.com/communities/data-center-solutions/accelerating_business_overhauling_service_management/

    Nice Post and Timely!

    @HudnallsHuddle

    • CAHighlight

      Thank you for your feedback Michele. Agreed – security cannot be overlooked. Appreciate your input!

  • Mitesh

    I would love a printed copy

  • Lars Johansson

    I love the idea of BYOID! This makes me choose if I am almost anonymous (with my Hotmail Nicname) or official with identity from an official organisation. My Identity Provider will attach identity with right level of LoA according to the need of the Service provider.

    • CAHighlight

      Thank you for your comment. BYOID has tangible benefits for end users and relying parties but it also has to be weighed in the balance with potential risks and liability concerns. It will be interesting to see how BYOID plays out in the enterprise.