Privileged Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Organizations

© Morey J. Haber 2020

M. J. HaberPrivileged Attack Vectorshttps://doi.org/10.1007/978-1-4842-5914-6_16

16. Mobile Devices

Morey J. Haber¹ 

(1)

Heathrow, FL, USA

 

Mobile devices represent a unique attack vector for a threat actor. They have accounts and credentials, but no role-based access, and there are generally only two permission types: user and root. In addition, root is generally not available to the end user, and there is only one account with a single owner and identity operating the device. These are simple facts regarding mobile device design. To aid in this discussion, a mobile device is defined as a handheld computer with a touchscreen interface and optional physical buttons that allows connectivity to the Internet or other computing devices ...