Evolution of MTD

As organizations and employees are increasingly dependent on mobile devices, these endpoints have become easy target for security attacks. With different kinds of malware evolving year by year, there is a growing need to protect these devices against such attacks.

Employees using mobile devices often store sensitive data such as passwords, contact information, email, etc. This is the reason why mobile phones are becoming more and more vulnerable to attacks.

This created a mandatory demand for the MTD solution. MTD is the only way to ensure that data remains safe and confidential and to make sure devices remain secured.

What is MTD?

MTD refers to Mobile Threat Defense. There are two pillars for device security:

• Threat Identification/Detection
• Threat Prevention/Remediation

MTD protects by detecting and preventing malware attacks on Mobile devices. MTD solution collects and analyses the unusual behavior that compromises the device security. MTD solutions also recognize malicious and suspicious activities on the devices and intervene to fix them immediately

MTD is called with different names in the market. However, the concept behind them remain the same

• MTD-Mobile Threat Defense
• MTD-Mobile Threat Detection
• MTP-Mobile Threat Protection
• MTM-Mobile Threat Management

Why Do Enterprises Need MTD Solution?

With most Enterprises allowing their employees to use mobile devices for business purposes, chances are very high for company data to be compromised.

Just using a traditional MDM solution cannot protect against security threats and attacks arising out of user behaviors. While MDM can ensure that basic security and compliance policies are set on end points, it lacks active threat detection. It does not have the ability to proactively identify and defend against device, app and network-level attacks/threats. MDM solutions cannot react to mobile security threats dynamically, and cannot provide continuous visibility of device health.

Only a MTD solution can help to detect and block mobile security threats/attacks. MTD ensures business continuity by predicting, detecting and preventing threats/attacks by scanning at different levels.

What are different scan levels?

MTD solutions protect devices at different levels:

• Device-level
• Network-level
• Application-level

On the Device level, MTD tools track indicators such as security versions update, system parameters, device configuration, and firmware and system libraries to identify vulnerabilities and suspicious/malicious activity on the device.

Examples: 

• Rooted/Jailbroken devices, 
• Vulnerable/unpatched device OS versions

On the Network level, MTD tool monitors cellular and wireless network traffic for unusual behavior and a variety of customized man-in-the-middle detection techniques. 

Examples:

• Man-in-the-Middle (MITM) attacks
• Insecure Wifi and hotspots

 On the Application level, MTD tools secure enterprise data from Malicious apps through scanning and code analysis. It also analyses the applications installed on the devices and detect fake applications that can harm device or user data.

Examples:

• Fake apps identical to original apps
• Adware,Spyware

 What does MTD protect against?

MTD solution protects against a wide range of attacks designed specifically for mobiles like,

Malware:

These are malicious software designed to steal data and trick users into taking actions that further compromise the devices.

Phishing:

Phishing is a concept using which a user is compelled or fooled into visiting a compromised website or revealing personal information, such as login credentials, credit card numbers, and banking information. These attacks on mobile phones are more effective because users are more likely to click on links.

Network attacks:

Mobile devices connect to different networks, much more than desktops. This carries with it several new risks when users connect to unsecured WiFi hotspots. Sometimes, attackers can create a fake open network and let the users connect to it. This will compromise the data on the device.

Data leakage:

A data leak involves the unauthorized or unintentional data transfer of sensitive information from an Enterprise mobile device to an internet service. If an app or web developer fails to properly protect data, they are essentially exposing data to everyone. This includes sensitive company data as well.

Outdated Operating systems:

Device manufacturers keep sending patch OS updates to overcome the evolving malware and security threats. However, Enterprises tend to ignore or block updates that are being sent by OS vendors. This leaves devices vulnerable to new malware.

Fake app Protection/Untested Mobile applications:

Sometimes users tend to download applications from third-party sites instead of downloading from official app stores. Most of these apps will not have a clear source and become vulnerable because of coding errors and security not being managed properly within the app. This gives a way for hackers to get sensitive information from the device.

Conclusion:

Threat detection and prevention intelligence offered by MTD solution ensures seamless business continuity and reduces burden on IT teams that manage Mobile devices . It is imperative for the Enterprises that allow Mobile devices to have MTD solution in place to make sure their corporate data is secured and devices are safe from Malwares and attacks.