Re: PDA's/Blackberrys: risk to networksL

["Frynge Customer Support" <frynge () frynge com>]

Paul:

That depends.  I would need to know these things

A) What email programs do these PDAs use?
B) What operating system do the PDAs use?


Viruses are tranferred in a couple of ways

1: through some type of attachment that is clicked on

2: through an attachment that is not clicked on and loaded automatically 
(via active X or javascript or some other scripting language)

3:  visiting specific places on the internet, like a web page, and then 
through javascript automatically in the background

After they get on your PDA, depending on what your email program is, and 
depending on what operating system the PDAs run on, will show you how they 
are transferred from computer to computer and what they actually will do.

Let me know those factors and I can give you an assement as well as easy 
ideas to implement to protect yourself better.

Kelly Sigethy
Frynge.com
http://www.frynge.com


----- Original Message ----- 
From: "Chinnery, Paul" <PaulC () mmcwm com>
To: <security-basics () securityfocus com>
Sent: Thursday, October 19, 2006 1:51 PM
Subject: PDA's/Blackberrys: risk to networksL


Some of our directors are bringing in PDA's like Palms and using them to 
sync up with their email.  Since virus writers and mailicious hackers are 
targeting these devices, we are wondering what the security impact is on 
networks
Can viruses be transmitted easily between PDA and the network machine they 
connect to?
Could a key logger prg or other malicious prg be easily transferred?
We're a small, rural hospital and although I keep pretty current on security 
issues I haven't see much on this forum or other security related forums 
which is why I am asking the group for their opinions.
BTW, we're a W2K shop with W2K Pro and XP sp2 computers using Exchange2K and 
SQL.

Paul Chinnery
Network Administrator
Memorial Medical Center


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------