Mocana's Weekly News Roundup, Ed 13
This week, IoT has shown to be a hot topic around all fronts, and is extending its reach far outside the enterprise and into our daily lives.
However, that means there are more security concerns to be aware of than ever before--and far less companies and industries are equipped to handle it than we realize.
This includes health organizations, whose "accredited" apps aren't up to par in data protection policies. Our personal information is at risk on all affronts, and we need to be conscientious about how it is being transferred in today's digital scope.
Most importantly, perhaps, in our own daily mobile phone use. Androids have been shown to display many vulnerabilities; have you seen the vulnerabilities report from the University of Cambridge?
To read more on this, check out our links for the Roundup below:
This article shows how mobile health security is still a prominent concern due to the multitude of mobile health apps and devices. The research study from BMC shows "mHealth apps that are clinically accredited may not align with the standards set forth in data protection policies." Unfortunately, health apps are much more behind than "many of us would like to believe." In order to make them safe, they must function properly and be secure.
The Var Guy
The login credentials are changing for upcoming mobile and IoT authentication. A new developer feature from Auth0 called "Passwordless" is exactly how it sounds: it doesn't require passwords. This brings to the table multifactor identity security that will eliminate users having to remember passwords. Since the Passwordless platform is cloud-based, this makes integrating the feature into code simple.
Did you know that a study from the University of Cambridge shows that 87% of Android devices are "vulnerable to known flaws?" This is mainly because there are so many kinds of Android devices, and manufacturers "don't issue security patches regularly, leaving their devices exposed to malware." With this comprehensive data, hopefully buyers will be more informed and incentivized to buy devices with more frequent patches and updates.
We are aware that IoT is transforming into the "Internet of Everything," and is going to extend the reach of the Internet into things we would never have thought was a risk. As a result, there is a clear need to "deliver an additional integrated security layer." This article covers some interesting outlets where IoT has made things like credit cards and ID cards obsolete.
In-app analytics are allowing developers to pinpoint what makes apps crash and how they can improve upon features users enjoy. As the article states, "analytics drive business." Gathering analytics and learning directly from users in real-time "offers a more complete picture," and helps with future iterations of apps in the enterprise. Using a variety of mobile app analytics tools can also augment your ability to pick up on problems.
As the article suggests, knowing the differences of mobile device management and mobile application management is important because they overlap. In the IT department, you need to take inventory on what your users need, your security and compliance requirements as well as what kind of technologies will assist you in meeting those goals.
We value your input as a reader; let us know your thoughts in the comments here or tweet us @mocana.