smartphone security guide: the easiest way to keep your phone & data secure

SMARTPHONE SECURITY GUIDE

THE EASIEST WAY TO KEEP YOUR PHONE AND DATA SECURE

APRIL 2016

The costs of not securing your smartphone: 67% of organizations had a data breach as a result of employees using their mobile phones to access the company’s data

(source)

Smartphone Security GuideThe easiest way to keep your phone and data safe

https://www.lookout.com/news-mobile-security/cost-of-mobile-data-breach

Increased attacks over smartphones: In 2015 there was a 500% increase of the instances of smartphone users being targeted by ransomware, with cybercriminals using exploitative apps to con money from users, in exchange for restoring full functionality to a device

(source)


https://daisygroup.com/2016/02/malicious-smartphone-apps-infect-billions-of-devices-and-businesses/https:/www.lookout.com/news-mobile-security/cost-of-mobile-data-breach

You’ll be extremely vulnerable on any phone you use, no matter its brand or operating system


What matters is that you know how to properly use that phone and create basic security habits in order not to expose yourself


Basic security settings for smartphones can be tweaked by anyone No advanced tech skills needed.



Smartphone security guide – here’s the easiest way to keep your phone & data safe

Activate a screen lock


Your phone should auto lock itself after a short period of inactivity (30’, for example).

Enforce automatic wiping of the device after 10 failed login attempts.

1.

Use a password to unlock the screen.Don’t use a PIN code, they are the easiest ones to breach.

If you can, you can also lock your screen using a pattern or fingerprint.

Biometrics are one of the most secure ways to authenticate – they are not secret, but they are hard for intruders to replicate.


Be careful with those apps

You are exposed to:- Malware / adware / ransomware- Losing access to your accounts (work, email, social media, etc),

your data (photos, videos) and even your phone- Financial losses


2.

Only download apps from the official app storesMake sure that the option to allow third party apps is disabled.


Check permissions for the appsUninstall or revoke access to apps that require permissions that they shouldn’t.

Why would a flashlight app require permission to access your contacts or text messages?


Do a spring cleanup through appsUninstall apps that you don’t use anymore. They are potential security vulnerabilities.

Keep up to date the apps that you do use.

Look over the ones that consume the most memory, data or battery, see if there’s anything unusual around there.


Be careful with that web browsing Ad content is accountable for between 18-79% to transferred mobile data. JavaScript elements add an extra 6 to 68%.

(source)


3.

http://www.businessinsider.com/enders-analysis-ad-blocker-study-finds-ads-take-up-79-of-mobile-data-transfer-2016-3https:/www.lookout.com/news-mobile-security/cost-of-mobile-data-breach

Install an ad blocker and block pop-upsIt will help you avoid malvertising (you don’t have to click on anything in order to get infected because of malvertising).


Disable JavaScriptIt’s one of the most vulnerable software products (and also one of the most exploited by cyber crooks).

You can disable it from your mobile browser settings.


Watch out where you tapBe careful not to end up clicking by mistake where you didn’t want in the first place.


Keep your guard up for phishingPhishing attacks are extremely successful on smartphones because they are much harder to detect than on your PC or laptop.


4.

Watch out what you click onDon’t click on links that you never requested or you don’t know where they lead.

If you end up clicking on them and they require your credentials, it’s safer not to fill in anything.


Activate remote device locatorIn case your phone is lost or stolen, you’ll be able to remotely locate it.


5.

Activate automatic backup in cloudIn case that your phone is destroyed, lost or stolen, you won’t have to worry about losing anything. All apps and data will be automatically synchronized in the cloud.


6.

Activate two-factor authenticationActivate it for all the accounts where it’s possible. Start with your more important ones (email, social media, cloud storage). It will act as a second layer of protection.

Every time you’ll want to sign in from a new device, it will require you to verify your identity through a unique,time-sensitive code, that you’ll receive via text message.


7.

Turn on encryptionThe phone will ask you to set a password to unlock it and decrypt the data on it.

If you forget it, only a complete factory reset will get access back into the system.


8.

Install an antivirusThey are not as potent as their desktop version, but it’s better to have one installed than without any kind of protection.


9.

Only use secure connectionsNo public free wireless networks, especially when you’re accessing sensitive data (email account, bank account, work documents).

Use your mobile data instead.

A VPN (Virtual Private Network) will also protect you – it will encrypt your data and internet traffic.


10.


Finding this presentation useful?Why not share it with your followers?

Heimdal SecurityWe protect you from attacks that antivirus can't blockWebsite: https://heimdalsecurity.com/Blog: https://heimdalsecurity.com/blog/Twitter: https://twitter.com/HeimdalSecurityFacebook: https://www.facebook.com/HeimdalSec


smartphone security guide: the easiest way to keep your phone & data secure

Software