To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
This is a growing area of concern, as many people are trying to get more and more "hands-free" with their phones. Numerous products now utilize Bluetooth as a medium for wireless headsets, tethering and synching files with computers. It's important to always keep in mind, though, that these technologies have security risks associated with them, even if they make it easier to use products like mobile phones.
First, I would not use the Bluetooth headsets if the risk of eavesdropping is unacceptable to your organization. There is an excellent video by Josh Wright of Inguardians Inc. in which he demonstrates the dangers of using a Bluetooth headset. I would also recommend becoming familiar with the tools that can be used against your phone's Bluetooth capabilities, including penetration testing suites like Bluediving.
It is also important to train corporate employees to use caution when using their phones. Tell them, for example, to be wary of the websites they surf. Your corporate Web policy should mention that company phones should not be used to access questionable websites. Your users should also be careful to not lose their phones or leave them unattended.
You should also attempt to train employees that carry corporate phones to use some discretion. There have been many times where I have overheard seemingly sensitive conversations because people are talking loud enough for everyone in the airport terminal to hear.
|
