Communications

Securing Cell Phones

(Page 2 of 2)

  • Wednesday, August 1, 2007
  • By Kate Greene

Phones with hardware security aren't yet available to consumers, Raghunathan says, but he expects that the first versions of these will appear within the next year or so. One of the driving forces behind hardware security is the Trusted Computing Group, a consortium of technology companies including Intel, Microsoft, IBM, and Hewlett-Packard. One of the organization's goals is to establish hardware-security standards for phones. While secure hardware could provide users with benefits, there is some disagreement regarding who would have access to the hardware. Some groups, including the Electronic Frontier Foundation, argue that with trusted computing, consumers might have less control of their devices than service and content providers do. For instance, content providers might use the platform to create unbreakable digital-rights management software to lock a downloaded song or video onto a device.

Some experts believe that the companies that make mobile phones and software can solve many of the security issues. By incorporating better software practices so that security is integrated from the first day the software is written, companies can do a lot to keep viruses to a minimum. However, because it costs money to make phones more secure, and because it's a feature that isn't readily visible to a consumer (unlike a three-megapixel camera, for example), security is often an afterthought. "The real failing is that the vendors didn't learn the PC lesson and design better operating systems," says Steven Bellovin, a professor of computer science at Columbia University, in New York. "It's not like they weren't warned."

Even so, mobile virus and malicious software attacks have been minimal within the past few years, possibly because the industry is broken up into many different cellular service providers and software and hardware manufacturers, says Richard Ford, a professor of computer science at Florida Institute of Technology, in Melbourne. This means that for a virus to make a large impact in the industry, it would need to be rewritten a number of different times to work on various devices. Unlike the PC world, there is no big cellular target yet, although thanks to the iPhone's initial buzz, it may be developing a bull's-eye. "Hopefully the next year will be quiet," Ford says. "Quiet is good, but I think that sometime in the next three to five years, we're going to see a nasty outbreak."

More in Communications

Nanowire LEDs

Read More »
Print

Related Articles

Smart Phones Help Fight Bank Fraud

As more people carry the devices, technology firms are creating better security checks for bank transactions.

Mobile Flaw Could Cloak Clicks

Researchers demonstrate that mobile phones are exceptionally vulnerable to a browser bait and switch.

How Android Security Stacks Up

An Android phone's approach to security is radically different from an iPhone's--but is it better?

Close Comments

To comment, please sign in or register

Forgot my password

thmlco

18 Comments

  • 1659 Days Ago
  • 08/01/2007

iPhone Update 1.01

And at the very least, make sure the phone's software can be easily updated. A software update for the iPhone (1.01) that corrects this and a few other issues is already available for download.

Reply

mezza

1 Comment

  • 1659 Days Ago
  • 08/01/2007

Hyperbole?

I found this particular article surprising.

The security lapse on Apple's part with the Safari browser on the iPhone is lamentable. Especially given the key focus of the device is mobile internet usage.

However to use this as an example for other cellphone manufacturers is a bit of a journalistic leap of faith.

Mobile device manufacturers have to deal with potential security breaches through any number of methods (WAP, HTML, Bluetooth or Infrared OBEX) but to imply they haven't been addressing this already or that Apple have discovered something new?!! Not really a clarion wake up call is it?

And hardware security on the device being a solution? meh. Proper partitioning of services and a good OS seems a better bet to me.

Reply

martinaatayo

112 Comments

  • 1657 Days Ago
  • 08/03/2007

cell phone security

Ipod phones and cell phones security, no matter,
amount of research work,(hardwares and softwares),
can be developed successfully, only to an extent,
but not totally, by simple reason that these
devices are wavelenght and frequency manipulated.
Even a move by some banks in the nation allowing clients to access and pay bills on cell phone
browsing, and at the same time, guaranteeing security protection raises serious concern.
Security in the context of cell phones, if it must be meaningful, the government must be involved and a law safeguarding functionality and
uasge,clearly written and passed by congress.

Reply

Advertisement

MAGAZINE

Can We Build Tomorrow's Breakthroughs?

Manufacturing in the United States is in trouble. That's bad news not just for the country's economy but for the future of innovation.

Advertisement

Technology Review Lists

TR50

Our list of the 50 most innovative companies, including the following:

SpaceX

Synthetic Genomics

Toyota

Cellular Dynamics International

More

Advertisement

Facebook

Advertisement