Mobile Device Security
A Comprehensive Guide to Securing Your Information in a Moving World
1st Edition
Published on 16. June 2010
Book
Hardback
302 pages
978-1-4398-2016-2 (ISBN)
Description
As each generation of portable electronic devices and storage media becomes smaller, higher in capacity, and easier to transport, it's becoming increasingly difficult to protect the data on these devices while still enabling their productive use in the workplace. Explaining how mobile devices can create backdoor security threats, Mobile Device Security: A Comprehensive Guide to Securing Your Information in a Moving World specifies immediate actions you can take to defend against these threats. It begins by introducing and defining the concepts essential to understanding the security threats to contemporary mobile devices, and then takes readers through all the policy, process, and technology decisions that must be made to create an effective security strategy.
Highlighting the risks inherent when mobilizing data, the text supplies a proven methodology for identifying, analyzing, and evaluating these risks. It examines the various methods used to store and transport mobile data and illustrates how the security of that data changes as it moves from place to place. Addressing the technical, operational, and compliance issues relevant to a comprehensive mobile security policy, the text:
Provides methods for modeling the interaction between mobile data and mobile devices-detailing the advantages and disadvantages of each
Explains how to use encryption and access controls to protect your data
Describes how to layer different technologies to create a resilient mobile data protection program
Provides examples of effective mobile security policies and discusses the implications of different policy approaches
Highlights the essential elements of a mobile security business case and provides examples of the information such proposals should contain
Reviews the most common mobile device controls and discusses the options for implementing them in your mobile environment
Securing your mobile data requires the proper balance between security, user acceptance, technology capabilities, and resource commitment. Supplying real-life examples and authoritative guidance, this complete resource walks you through the process of creating an effective mobile security program and provides the understanding required to develop a customized approach to securing your information.
Highlighting the risks inherent when mobilizing data, the text supplies a proven methodology for identifying, analyzing, and evaluating these risks. It examines the various methods used to store and transport mobile data and illustrates how the security of that data changes as it moves from place to place. Addressing the technical, operational, and compliance issues relevant to a comprehensive mobile security policy, the text:
Provides methods for modeling the interaction between mobile data and mobile devices-detailing the advantages and disadvantages of each
Explains how to use encryption and access controls to protect your data
Describes how to layer different technologies to create a resilient mobile data protection program
Provides examples of effective mobile security policies and discusses the implications of different policy approaches
Highlights the essential elements of a mobile security business case and provides examples of the information such proposals should contain
Reviews the most common mobile device controls and discusses the options for implementing them in your mobile environment
Securing your mobile data requires the proper balance between security, user acceptance, technology capabilities, and resource commitment. Supplying real-life examples and authoritative guidance, this complete resource walks you through the process of creating an effective mobile security program and provides the understanding required to develop a customized approach to securing your information.
Reviews / Votes
Writing with organizations in mind, Fried, an information security professional who creates security programs for large companies, presents a guide to securing mobile data and devices against threats, and the policy, process, and technology decisions needed to create effective security strategy. He covers the risks involved in mobile data and identifying, analyzing, and evaluating them; methods used to store and transport data and how its security changes as it moves from place to place; the advantages and disadvantages of different security models; encryption; mobile security and specific technology controls; creating a policy; and the elements of a mobile security business case.-In Research Book News, booknews.com, February 2011 Writing with organizations in mind, Fried, an information security professional who creates security programs for large companies, presents a guide to securing mobile data and devices against threats, and the policy, process, and technology decisions needed to create effective security strategy. He covers the risks involved in mobile data and identifying, analyzing, and evaluating them; methods used to store and transport data and how its security changes as it moves from place to place; the advantages and disadvantages of different security models; encryption; mobile security and specific technology controls; creating a policy; and the elements of a mobile security business case.
-In Research Book News, booknews.com, February 2011
More details
Language
English
Place of publication
Washington
United States
Target group
Professional and scholarly
Academic and Professional Practice & Development
Illustrations
9 s/w Abbildungen, 8 s/w Tabellen
8 Tables, black and white; 9 Illustrations, black and white
Dimensions
Height: 240 mm
Width: 161 mm
Thickness: 21 mm
Weight
622 gr
ISBN-13
978-1-4398-2016-2 (9781439820162)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Person
Stephen Fried is a seasoned information security professional with more than 25 years experience in information technology. For the past 14 years, Stephen has concentrated his efforts on providing effective information security leadership to large organizations. He has led the creation of security programs for Fortune 500 companies and has extensive background in such diverse security issues as risk assessment and management, security policy development, security architecture, infrastructure and perimeter security design, outsource relationship security, offshore development, intellectual property protection, security technology development, business continuity, secure e-business design, and information technology auditing. A frequent invited speaker at conferences, Stephen is also active in many security industry organizations. He is a contributing author to the Information Security Management Handbook and has also been quoted in Secure Enterprise and CIO Decisions.
Content
Introduction. What Are You Trying to Protect? It's All About the Risk. The Many Faces of Mobility. Data at Rest, Data in Motion. Mobile Data Security Models. Encryption. Defense in Depth: Mobile Security Controls. Defense in Depth: Specific Technology Controls. Creating a Mobile Security Policy. Building the Business Case for Mobile Security. Each chapter includes a "Conclusion" and an "Action Plan".