Wireless and Mobile Device Security, 2nd Edition

Penetration Testing and Smartphones

When it comes to mobile malware defense, it’s a best practice to set realistic policy and security templates for each type of authorized device, and to become familiar with the devices used and their vulnerabilities. The best way to do this is to test the security measures in place via penetration testing (pentesting) on sample phones or emulators.

Pentesting smartphones involves the following stages:

• Recon—During this stage, the tester gathers information by identifying the types of mobile devices on the target network.
• Scanning—After the types of phones have been identified, the scanning phase can proceed. When scanning for mobile devices, the tester looks to identify networks sought out by mobile devices. ...