Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FUNDAMENTALS GUIDE Specifications download pdf (Page 27)

Attack Surface Analysis of BlackBerry Devices

Backdoor

A malicious application could establish a connection to the attacker, and then accept commands that would

allow the attacker to access and modify sensitive data, and initiate further connections and messages.

Port Scan

Since an application can open sockets, it can perform a TCP scan on a network host or a range of network

hosts. Depending on the network configuration, this could include scanning the internal network (via MDS).

In a proof of concept implementation, the performance of such a TCP connect scan was measured (Non MDS

using GPRS). Here are the results:

Note that increasing the number of concurrent threads greatly increases the scan rate. Performance may

vary depending on a number of factors, such as the target configuration (e.g. whether the target responds

to connection requests on closed ports or simply drops the packets) and the Network Operator/Network

Coverage. The numbers above were recorded while scanning a target which responded to connection

attempts on closed ports. While this is not the most efficient way to scan a network, judging by these fig-

ures it is feasible.

Mitigation

You can set the following options to mitigate the attacks outlined above. See Mitigation Strategies for more

information.

Number of threads Number of ports Elapsed time Scan speed

1 200 351.4 seconds 34.15 ports/minute

4 200 69 seconds 173.91 ports/minute

IT Policy "Allow External Connections" = False

"Allow Internal Connections" = False

Application Controls "External Domains" = [list of allowed domains]

"External Network Connections" = Not Permitted

"Internal Network Connections" = Not Permitted

Device Firewall Status = Enabled

Application Permissions Connections > Carrier Internet = Deny

Other Device Settings

1 2 ... 22 23 24 25 26 27 28 29 30 31 32 ... 38 39

No comments

Marka: Epson | Kategoria: Data projectors | Rozmiar: 6.29 MB |

PowerLite

Pro G5550

Full networkability

Message broadcasting

Epson’s EasyMP

monitor tool

Low cost of ownership

Pro G5550

Więcej produktów i instrukcji dla Projektory danych Epson

Modele	Rodzaj dokumentu
V11H665520	Arkusz Danych Epson BrightLink Pro 1430Wi, 2 strony
V11H620041	Arkusz Danych Epson EB-1980WU, 2 strony
V11H546041	Arkusz Danych Epson EB-4650, 8 strony
V11H551040	Arkusz Danych Epson EB-X18, 2 strony
V11H552020-N	Arkusz Danych Epson EX3220, 4 strony
V11H606140	Arkusz Danych Epson EB-Z11005, 2 strony
V11H616040	Arkusz Danych Epson EB-Z9870U, 2 strony
821P	Broszura Epson 821p Product Brochure, 2 strony
V11H546020	Arkusz Danych Epson PowerLite 4650, 6 strony
V11H582041	Arkusz Danych Epson EB-955W, 2 strony
EMP 8100NL	Instrukcja Użytkownika Epson EMP 8100NL User's Manual, 117 strony
Z9870NL	Dokumentacja Epson Z9870NL Product Specifications, 2 strony
450Wi	Broszura Epson 450Wi Product Brochure, 18 strony
EMP-7300	Instrukcja Użytkownika Epson EMP-7300 User's Manual, 121 strony
V11H570040	Arkusz Danych Epson EB-X20, 2 strony
DREAMIO EMP-TW700	Instrukcja Użytkownika Epson DREAMIO EMP-TW700 User's Manual, 3 strony
V11H543041	Arkusz Danych Epson EB-4850WU, 2 strony
V11H581041	Arkusz Danych Epson EB-945, 2 strony
V11H622041	Arkusz Danych Epson EB-1970W, 2 strony
V11H555141	Arkusz Danych Epson EB-X03, 2 strony