June 13, 2008

IPhones present Wi-Fi risk to businesses

Expert warns that as the use of Wi-Fi and Web 2.0 applications increases, so will the security threat to businesses

IPhones are creating an increased security threat to businesses, especially when used with Wi-Fi networks, an Australian expert has warned.

Chris Gatford, senior security consultant at Pure Hacking, highlighted that the adoption by businesses of the iPhone will "elevate risk to a level never seen before."

[ For more on making the iPhone work in businesses, see InfoWorld's special report. ]

"We're going to find a lot of executives using the iPhone's push e-mail to combine their personal and business messages... combined with the ever-increasing use [on the iPhone] of Web 2.0 applications, there are a lot of vulnerabilities," Gatford said at the IDC SecurityVision conference in Sydney this week.

"Like it or not, there's about to be a whole lot more risks for a lot of organizations," he added.

Gatford identified the further increased risk when iPhones are used on Wi-Fi networks. "Wi-Fi spots aren't encrypted ... nor is a great amount of the information you receive from Web 2.0 applications."

Gatford also warned that as prices for data plans fall, Wi-Fi use will increase, which in turn will "increase the vulnerability of the iPhone."

PC Advisor is an InfoWorld affiliate.

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.