Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FUNDAMENTALS GUIDE Dokumentacja Strona 14
- Strona / 39
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Attack Surface Analysis of BlackBerry Devices
Legend:
F: Firewall A: Application Control/Permissions I: IT Policy O: Other Device Settings
All but one of the attacks (JAD Spoofing) outlined in this section require malicious code to be present on the
device. The only way for malicious code to get onto the device is through user interaction. User interaction
is also required in order to authorise the malicious code to perform sensitive actions. These facts highlight
the need for user education around safe computing practises when using all forms of computing including
mobile devices.
JAD Files
JADs (Java Application Descriptors) are plain text files that describe the
attributes of a java application, such as its vendor, description, and size.
A .jad file also provides the URL where the application can be down-
loaded, and for this reason it is used as a standard way to provide Over
The Air (OTA) installation of java applications on J2ME mobile devices.
When a BlackBerry user opens a .jad file, they are presented with the
application details, and can decide whether or not to download and
install it. However, by using a specially crafted .jad file, spoofed infor-
mation can be introduced into the display to make the application
appear signed
18
(in the context of MIDP signing
23
, not BlackBerry
Signing) (Figure 7). Note that the attacker does not have complete con-
trol of the display (for example there is a duplicate "Vendor" entry which
was necessary to align the text correctly).
This problem is not unique to BlackBerry devices, Symantec have previ-
ously found a number of JAD parsers on other mobile devices which
14
Sub-System Spoofing Data
Interception
/Access
Data
Theft
Backdoor Service
Abuse
Availability Network
Access
Wormable
JAD Files AI
File System AO
SMS FAI FAI FAI FAI
Bluetooth FAIO FAIO
Email FAI FAI FAI
PIM A A
TCP/IP FAI FAI
HTTP FAI FAI FAI
Telephony A A A
Figure 7: A .jad file with spoofed informa-
tion
- Attack Surface 1
- Analysis of 1
- BlackBerry Devices 1
- Introduction 5
- Architecture Overview 6
- Modifying Signed Applications 7
- Malicious Code Signing 7
- Mitigation Strategies 8
- BIS Deployment 8
- BES Deployment 10
- Attack Surface Analysis 13
- JAD Files 14
- Mitigation 15
- File System 15
- Persistent Storage 15
- J2ME File System 16
- USB Mass Storage 16
- Memory and Processes 17
- SMS (Short Message Service) 18
- Premium Rate Scam 18
- SMS Interception 19
- SMS Backdoor 20
- Bluetooth 21
- Bluetooth Backdoor 21
- Bluetooth Worms 21
- Email Interception 22
- Backdoor 22
- Data Theft 25
- TCP/IP Connections 25
- Proxy/Firewall Bypass 26
- Port Scan 27
- HTTP / WAP 28
- HTTP Proxy 29
- Telephony 30
- Call Record Monitoring 31
- Premium Rate Calls 31
- Telephony Data Theft 32
- Conclusions 33
- Appendix A 35
- References 36
Powiązane produkty i podręczniki dla Oprogramowanie Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FUNDAMENTALS GUIDE
Oprogramowanie Blackberry PROFESSIONAL SOFTWARE FOR IBM LOTUS DOMINO Instrukcja Użytkownika
(19 strony)
(19 strony)
Oprogramowanie Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE Instrukcja Użytkownika
(23 strony)
(23 strony)
Oprogramowanie Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE Instrukcja Użytkownika
(65 strony)
(65 strony)
(12 strony)
(6 strony)Panasonic TX-29P150T manuály
Uživatelské manuály a uživatelské příručky pro Televize Panasonic TX-29P150T.
Poskytujeme 1 manuály pdf Panasonic TX-29P150T ke stažení zdarma podle typů dokumentů: Uživatelský manuál
Panasonic TX-29P150T Uživatelský manuál (61 strany)
Značka: Panasonic | Kategorie: Televisions | Velikost: 0.91 MB |
Tabulka s obsahem
Примечания :
13
Audio Video
14
IN L IN
14
Соединения
15
Режим RGB
17
Выбор Канала
18
Чет. поз
31
Н П ПМН7
31
<]ra[>
35
SURROUND
37
PFE. TV/AV
41
<]га [>
42
<] [>
48
© © @
51
© ® ®
51
® ® ®
53
Ползный совт
54
Další produkty a příručky pro Televize Panasonic
| Modely | Typ Dokumentu |
|---|---|
| TX-R32LX85 |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-R32LX85,
48 stránky
|
| TX-29P250T |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-29P250T,
44 stránky
|
| TC-14F1 |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TC-14F1,
12 stránky
|
| TC-29GF15R |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TC-29GF15R,
37 stránky
|
| TX-21PM30TQ |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-21PM30TQ,
30 stránky
|
| TX-2170T |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-2170T,
28 stránky
|
| TX-15LT2T |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-15LT2T,
28 stránky
|
| TX-21PM10T |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-21PM10T,
32 stránky
|
| TC-21PM10RQ |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TC-21PM10RQ,
29 stránky
|
| TC-15PM10R |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TC-15PM10R,
31 stránky
|
| TC-14F2 |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TC-14F2,
25 stránky
|
| TX-R32LZ80 |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-R32LZ80,
48 stránky
|
| TX-15PM11TQ |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-15PM11TQ,
27 stránky
|
| TX-21X2T |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-21X2T,
24 stránky
|
| TC-1405RT |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TC-1405RT,
12 stránky
|
| TC-21F2 |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TC-21F2,
12 stránky
|
| TH-42PW5 |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TH-42PW5,
40 stránky
|
| TH-50PHW5 |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TH-50PHW5,
40 stránky
|
| TX-29P80T |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-29P80T [it] ,
32 stránky
|
| TX-29G10T |
Uživatelský manuál
Инструкция по эксплуатации Panasonic TX-29G10T,
41 stránky
|
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.029 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji