Securing the smartphone: Infosecurity interviews RIM on security

In his speech, Totzke said, he talked about the growing "app problem" in the mobile space and how they pose a risk for the smartphone using community.

"There are a lot of drivers for mobility at the moment, the least of which is the increasing availability of apps for smartphones", he said, adding that, as a result, businesses of all sizes are adopting mobile applications.

"This is great news from a business context. Customers are really starting to realise what they can do with the latest mobile phones," he explained, noting that, when you start doing more things on a mobile basis for your business, there are a number security issues that must be addressed.

But, he told Infosecurity, company CIOs are also coming under a lot of pressure to implement mobile apps on users smartphones, sometimes before the IT department has dealt with all the security issues.

And this, he explained, is where the security issues with mobile phone usage start to cause problems.

The problem with mobile technology, he went on to say, is that the mobile world is a heterogeneous environment, with about 400 to 500 malware applications floating around in the wild, each capable of attaching to between 8 and 10 smartphone platforms.

"In the US, we are seeing an increasing trend for users to hook their personal mobile up to the business network. This changes the risk profile from, for example, business users using business mobiles", he said.

And this is where controlling software such as BlackBerry Enterprise Server (BES) enters the frame, as it offers managers quite granular control of what can and cannot be done in the mobile environment.

"Basically it allows managers to create a secure environment with a number of security rules that control what users can and cannot do with their BlackBerry on the move", he said.

"You can, for example, switch Bluetooth on and off as required, and the ROM of smartphone also validates all the software on the handset each time it is powered up", he added.

Totzke also cautioned against managers locking down employees from using their BlackBerry smartphones for leisure activities, such as Facebook usage and accessing other social networking portals.

If you do that, he says, you run the very real risk of driving users towards using their personal handsets for business usage, and then you really do start to hit potential security problems.

So what about small businesses who can't shell out for a corporate BES software and service?

Totzke said that this is where BlackBerry BES Express comes into play. The software, which is free to download and install, allows one or more smartphones to be used for email purposes, with BES Express acting as a secure hub through which all communications are processed.

"Mobile security has become a complex business. We (the industry) need to work to make the mobile environment secure", he said.

What’s hot on Infosecurity Magazine?