Despite the unseasonably cold weather, I participated in a mobile security event yesterday at the historic Willard hotel in Washington DC. I set the stage and presented a bunch of ESG Research data on mobile device use, security, and management. Other organizations presenting included the Defense Information Systems Agency (DISA), the (NRC), the US Patent and Trademark Office, and Juniper Networks.
It turns out that DISA is doing some very interesting things around mobile computing. For example, members of the US military can access an information portal called Defense Knowledge Online from their mobile phones. DISA also talked about a program called Go Mobile meant to provide numerous communications, training, and collaboration applications to mobile soldiers.
Since we are talking about the US Department of Defense, mobile device security is a critical requirement for this program so Go Mobile includes user authentication, secure data storage and transfer, secure device management, etc.
Initially Go Mobile was built for Blackberry devices but DISA is now adding support for Apple iPhones and Android phones because of high demand from users. Unfortunately, adding iPhone and Android support is more difficult than DISA anticipated. Why? Because both Apple and Google refuse to give DISA access to their security APIs so DISA had to do a series of workarounds to meet its security requirements. For example, DISA had to add an external Bluetooth device to provide secure personal networking capabilities because Apple wouldn’t provide API access to its iPhone security stack.
Hold the phone here! Apple and Google aren’t willing to provide additional technical support to the United States Department of Defense? Nope. One person I spoke with from DOD said that Apple flat out refused to play ball, telling DOD to “talk to our integrators and carriers.”
I understand that Apple and Google want to control their technology. If Citi or GE asked for API access, perhaps it would make technical sense to refuse but we are talking about the Department of Defense here.
Apple and Google have a market advantage and they know it — Androids and iPhones are so popular that Apple and Google can thumb their noses at DOD. In most cases, DOD would exercise cyber supply chain security best practice and refuse to purchase insecure Androids or iPhones at all. The fact that DOD is going the extra mile and developing workarounds demonstrates that it is willing to do the right thing for American troops in spite of this lack of industry cooperation.
It seems to me that Apple and Google are making self-centered bad decisions here that won’t play well with the American public. Clearly, Apple and Google should re-think these myopic and selfish policies. Providing API access to DOD is the patriotic and moral thing to do, especially since DOD is opening the door to lots of sales opportunities for both companies.
Tags: Apple, Bluetooth, cyber security, cyber supply chain security, Department of defense, DISA, DOD, Go Mobile, Google, iPhone, Juniper Networks, mobile computing, mobile devices, Security. Android Posted in Uncategorized | No Comments »
Now that we all have an assortment of iPhones, Droids, tablet devices, and Windows devices, lots of industry folks believe that mobile security is the next hot market. There are a number of players already in this market from pure plays like Good Security and Mobile Active Defense. Traditional endpoint security vendors like McAfee see this as an extension of its antivirus business. Symantec is in the same boat with antivirus as well as encryption software from PGP. Networking vendors also see up-side in the mobile device security market. Cisco has AnyConnect and ScanSafe while Juniper Networks wants to combine its Pulse client with its recent acquisition of SMobile.
These vendors come at mobile security from many different angles with different security functionality in different places–some on the device and some on the network. Will this confuse the market? No. Enterprises are actually looking for a wide range of mobile device security functionality. According to an ESG Research survey of 174 security professionals working at enterprise (i.e., more than 1,000 employees) organizations, the top three most important mobile device features are 1) device encryption, 2) device firewall, and 3) strong authentication. They also want things like DLP, VPN, and device locking.
Beyond security functionality, most enterprises also want an integrated platform for mobile device security and management. In other words, they want a single software package for device provisioning, configuration, reporting, etc. They also want a common set of features for all mobile devices rather than a potpourri of different features for iPhone, Windows 7, Droid, Palm, etc.
It appears then that the mobile device security market will include networking, security, and management vendors along with device manufacturers and carriers as well. Personally, I think mobile device security will have a network architecture look to it, with technology safeguards built into devices, the enterprise, and the cloud. If this happens, integration will be critical for all leading products.
Tags: Android, AnyConnect, Cisco, Droid, Good Security, iPhone, Juniper Networks, McAfee, Mobile Active Defenses, Palm, PGP, ScanSafe, SMobile, Symantec, Windows 7, Windows 7 Phone Posted in Uncategorized | No Comments »
Microsoft and partners announced a series of new mobile phones yesterday. The new phones are based upon Windows 7 which replaces the more antiquated Windows Mobile OS.
This announcement places Microsoft in an unfamiliar spot, the “hot seat.” Everyone is pressing Microsoft on how its Windows 7 phones will compete with iPhone and Google Android. When Microsoft CEO Steve Ballmer visited NBC’s “Today” show, host Matt Lauer mentioned the iPhone several times. Ballmer continually re-directed him back to the product.
One overused IT cliche is to declare that a company or product is “dead.” I’m sure that many pundits are saying this about Microsoft, trumpeting that Windows Phones are simply too little too late. I disagree for several reasons. Yes, Apple and have become the sexy consumer phones, but Microsoft still has a huge enterprise installed base. According to a recent ESG Research survey, 62% of enterprises already offer formal support for Microsoft mobile phones. Only Blackberry enjoys a higher support status. Combined with its Windows prowess, Microsoft has an opportunity to:
Microsoft shouldn’t try to compete with consumer-focused iPhone or Android. Rather it should combine some sexy consumer features with rock-solid business functionality. Apple and Google have momentum, Blackberry is vulnerable. If Microsoft establishes this position as “good enough” for consumers but superior for the enterprise, it wins where it counts–with software revenue.
Tags: Android, Apple, Blackberry, Google, iPhone, Microsoft, RIM, Windows Mobile, Windows Phone Posted in Uncategorized | No Comments »
Consumer buzz tends to center on two mobile phones: Apple iPhone and Android. As far as the enterprise is concerned however, these two phones remain down the list.
ESG Research conducted a survey of 174 IT professionals from enterprise organizations (i.e., greater than 1,000 employees) and asked them which mobile device platforms their organizations support. Here is what they said:
Phone: Support today: Will support in the future:
Blackberry 74% 11% Windows Mobile 62% 9% iPhone 43% 18% Palm WebOS 24% 17% Google Android 8% 16% Symbian 7% 14%
A few facts about the survey. First, it was conducted at the very end of 2009 so it doesn’t capture recent momentum or the impact of new products like iPad and iPhone 4. Additionally, this data comes from IT professionals in North America only.
My read of this data is as follows:
Unlike consumers, enterprises want more than just cool devices — application development, device management, security, and integration into the existing infrastructure are all important considerations. Vendors need to find the right combination of consumer cool and corporate requirements support if they want to defend their position or gain share in the enterprise.
Tags: Android, Apple, Blackberry, Google, HP, iPhone, Microsoft, Palm, Palm WebOS, RIM, Symbian, Windows Mobile Posted in Uncategorized | 1 Comment »
The latest iPhone commercials feature video calls and multiple couples sharing intimate moments. When describing , wireless carrier talks about, “the apps you crave.” Microsoft’s latest pitch is that Windows Mobile phones fold neatly into social networking.
There are a few common themes here. Each vendor is targeting consumers with whiz-bang functionality and lots of applications. Video capabilities are highlighted in all cases.
Given this focus, you would think that mobile devices = consumer devices but this is not the case. Enterprises are also running to and jumping on the mobile device bandwagon in a big way.
ESG Research surveyed 174 IT professionals about their organizations’ adoption and use of mobile devices. Here are a few data points that illustrate growing mobile device usage in the enterprise.
Question 1. What are your organization’s spending plans for mobile devices and mobile device support?
37% spending will increase significantly 45% spending will increase moderately 14% spending will stay flat 3% spending will decrease 1% don’t know
Question 2. How important are mobile devices to your organization’s business processes and productivity?
38% critical 48% important 11% somewhat important 1% not important today but will be important in the future 1% not important today or in the future 1% don’t know
Question 3: Does your organization develop, or plan to develop, specific applications for mobile devices?
28% already develop applications for mobile devices 34% plan to develop applications for mobile devices 26% no plans at this time but interested in developing apps. 11% no plans or interest in developing apps. 1% don’t know
In summary, enterprises are spending more on mobile devices and device support, they believe these devices are “critical” or “important” for the business, and most already develop mobile device applications or plan to do so.
Sounds to me like every IT vendor in the endpoint (PC, laptop, mobile device), network, security, management, and application markets should have a mobile device strategy. Those that either haven’t developed or articulated their strategies are way behind.
Tags: Android, Apple, Google, iPhone, Microsoft, Sprint, Windows Mobile Posted in Uncategorized | No Comments »
Your email: