Elements of Cyber Security - (BCY402)
Course Coordinator:
Prof. Yogesh N
Assistant Professor
Dept. of CSD
ATMECE, Mysuru
YN Prof. Yogesh N, Dept. of CSD, ATMECE 1
Module 2
Mobile and Digital Payments Security: Security Challenges and types of attacks
on Mobile devices, Security for Mobile Apps, Mobile Device Management tools and
techniques.
Digital payments Security: Banking Cards, Unified Payment Interface (UPI), e-
Wallets, Unstructured Supplementary Service Data (USSD), Aadhar enabled payments,
Digital payments related common frauds and preventive measures.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 2
Session 4
Mobile and Digital Payments Security
• Mobile Device Management tools and techniques
YN Prof. Yogesh N, Dept. of CSD, ATMECE 3
Mobile Device Management
Mobile device management (MDM) is a proven methodology and toolset that
provides a workforce with mobile productivity tools and applications while keeping
corporate data secure.
With a mature MDM platform, IT and security departments can manage all of a
company’s devices, regardless of their operating system.
An effective MDM platform helps keep all devices secure while keeping the
workforce flexible and productive.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 4
Why is Mobile Device Management important?
In recent years, mobile devices have become ubiquitous in enterprise use.
Businesses and their workforces rely on mobile devices such as smartphones,
tablets and laptops for a wide assortment of tasks. And as working remotely has
become essential, mobile devices have become an integral part of most
organizations, being vital tools for productivity and efficiency.
But because enterprise mobile devices access critical business data, they can
threaten security if hacked, stolen or lost. So, the importance of managing mobile
devices has evolved such that IT and security leaders are now tasked to provision,
manage and secure mobile devices within their respective corporate environments.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 5
Working of MDM
MDM is a solution that uses software as a component to provision mobile devices
while protecting an organization’s assets, such as data.
Organizations practice MDM by applying software, processes and security policies
onto mobile devices and toward their use.
Beyond managing device inventory and provisioning, MDM solutions protect the
device’s applications, data and content.
However, MDM is a device-centric approach, whereas mobile security and unified
endpoint management have evolved to a user-centric stance.
In an MDM program, employees can receive a dedicated work device, such as
laptops or smartphones, or have a personal device remotely enrolled.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 6
Working of MDM
Personal devices receive role-based access to enterprise data and email, a secure VPN,
GPS tracking, password-protected applications and other MDM software for optimal
data security.
MDM software can then monitor the behaviors and business-critical data on enrolled
devices. And with more sophisticated MDM solutions, machine learning and AI can then
analyze these data. These tools ensure devices are kept safe from malware and other
cyber threats.
For example, a firm might assign a laptop or smartphone to a staff member or
consultant that is pre-programmed with a data profile, VPN and the other necessary
software and applications.
In this scenario, MDM offers the most control to the employer. With MDM tools,
enterprises can track, monitor, troubleshoot and even wipe device data in the event of
theft, loss or a detected breach.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 7
Working of MDM
YN Prof. Yogesh N, Dept. of CSD, ATMECE 8
Components of MDM Tools
The components of MDM are
1. Device tracking
2. Mobile Management
3. Application Security
4. Identity and Access Management
5. Endpoint Security
YN Prof. Yogesh N, Dept. of CSD, ATMECE 9
Components of MDM Tools
Device tracking
Each device that an enterprise enrolls or issues can be configured to include GPS
tracking and other programs. The programs allow an enterprise's IT professionals to
monitor, update and troubleshoot the device in real-time. They can also detect and
report high-risk or non-compliant devices and even remotely lock or wipe a device if
lost or stolen.
Mobile management
IT departments procure, deploy, manage and support mobile devices for their
workforce including troubleshooting device functionality. These departments ensure
each device comes with the needed operating systems and applications for their users
—including applications for productivity, security and data protection, backup and
restoration.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 10
Components of MDM Tools
Application security
Application security can involve app wrapping, in which an IT administrator applies
security or management features to an application. Then that application is redeployed
as a containerized program. These security features can determine whether user
authentication is required to open an app; whether data from the app can be copied,
pasted or stored on the device; and whether the user can share a file.
Identity and access management (IAM)
Secure mobile management requires strong identity and access management (IAM).
IAM allows an enterprise to manage user identities associated with a device. Each
user’s access within an organization can be fully regulated, using such features as
single sign-on (SSO), multifactor authentication and role-based access.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 11
Components of MDM Tools
Endpoint security
Endpoint security encompasses all devices that access a corporate network, including
wearables, Internet of Things (IoT) sensors and non-traditional mobile devices.
Endpoint security can include standard network security tools such as antivirus
software and network access control and incident response, URL filtering and cloud
security.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 12
MDM Tools
There are a number of MDM solutions on the market that serve different cybersecurity
needs within the business. Some of the best options can bolster your security.
JumpCloud
This MDM tool provides endpoint protection, identity, and access security. It enables
centralized monitoring, management, and security of all mobile devices, whether
personal or corporate-owned.
Kandji
Kandji is used for managing and securing Apple devices like macOS, iOS, iPadOS, and
tvOS. The platform offers four core categories – Devices, Apps, Controls, and Identity &
Compliance – all managed through a central admin console.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 13
MDM Tools
Cisco Meraki Systems Manager
This MDM software isa collection of cloud-managed tools for wireless, switching,
enterprise mobility management (EMM), and security. It includes an endpoint
management solution that simplifies all endpoints' oversight, control, and security,
including mobile devices and applications.
Citrix
This mobile device management tool focuses on the security of remote employees.
Through its cloud-oriented workspace platform, individuals can safely and dependably
access company assets from any location and at any time. Citrix facilitates IT and
security groups overseeing all network devices, encompassing mobile and IoT devices.
This includes managing applications, content, and device identities, all through a
singular and unified interface.
YN Prof. Yogesh N, Dept. of CSD, ATMECE 14
Summary
• In today’s session, you all have gone through the following topics
• Mobile and Digital Payments Security
• Mobile Device Management tools and techniques
YN Prof. Yogesh N, Dept. of CSD, ATMECE 15
Discussion and Interaction
YN Prof. Yogesh N, Dept. of CSD, ATMECE 16
Topics for Next Session
Mobile and Digital Payments Security:
• Banking Cards
• Unified Payment Interface (UPI)
YN Prof. Yogesh N, Dept. of CSD, ATMECE 17
YN Prof. Yogesh N, Dept. of CSD, ATMECE 18