Deutsche Telekom Partnering Operating Alliance Summit - Zimperium
Download as PPTX, PDF•0 likes•190 views
The document discusses enterprise mobility and highlights critical mobile security vulnerabilities across different operating systems from 2007 to 2016. It mentions the integration of the Zimperium threat engine for in-app protection and presents a global threat analysis report that identifies over 3,800 threats in a week, with 63% being network-based. The top threats include suspicious apps, fake SSLs, and SSL stripping, emphasizing the importance of safeguarding mobile applications against cyberattacks.
Deutsche Telekom Partnering Operating Alliance Summit - Zimperium
- 1. All Rights Reserved © 2016
- 2. All Rights Reserved © 2016 Critical Vulnerabilities per OS 0 100 200 300 400 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 Android iOS
- 3. All Rights Reserved © 2016 3 Enterprise Mobility: Real world examples
- 4. All Rights Reserved © 2016 4 In-app protection made Simple ❯ Embed Zimperium threat engine into applications through SDK Secure ❯ Ensure mobile enterprise applications are protected against mobile cyberattacks ❯ Implement custom app workflows for a device under attack ❯ Safeguard the data in customer / partner business transactions Single Mobile Threat Management Platform now generates: Self-Protecting Apps
- 5. All Rights Reserved © 2016
- 6. All Rights Reserved © 2016
- 7. All Rights Reserved © 2016
- 8. All Rights Reserved © 2016
- 9. All Rights Reserved © 2016 Global Threat Analysis Report Over 3800 Critical* threats in 7 days • 63% of threats were network based • 36% were App based • >1000 devices involved across 86 unique networks Top 4 Threats • Suspicious Apps (36%) • Fake SSLs (35%) • SSL Strip (23%) • ARP/ICMP MITM (4%) 24 362 18 6 114 514 13 15 1066 ARP MITM Fake SSL certificate MITM ICMP Redirect MITM Rogue Access Point SSL Strip Suspicious Android App System Tampering Traffic Tampering Grand Total # of Devices 2% 35% 2% 0% 23% 36% 1% 1% # of Threats ARP MITM Fake SSL certificate MITM ICMP Redirect MITM Rogue Access Point App Based 36% Device Based 1% Network Based 63% Threat Distribution App Based Device Based Network Based
- 10. All Rights Reserved © 2016 Currently on Google and Apple stores..
- 11. All Rights Reserved © 2016 Contact Us https://www.zimperium.com/contact
Editor's Notes
- #5: Embedded zIPS with its z9 is actually embedded in an app to make what we are calling zIAPs, or In-App Protection apps. zIAP determines if the device is compromised, gets the attack details. If the device is under attack, zIAP informs the app and allows for actions to be taken to mitigate the risk (dependent on the threat )such as: registers for a callback and specific actions are then taken dependent on the threat: Invalidate Session / Logout Destroy the keys / Delete Cache Raise Fraud Alert Activate 3-Factor Authentication Reduce functionality to read-only Our zANTI penetration testing tool is a specific example where zIPS is embedded for over 500,000 users Self-Protecting Apps Reduce fraud on customer/partner applications