RE: PDA pen testing question

["Jerry Shenk" <jshenk () decommunications com>]

Something on this page might be helpful:
http://www.sans.org/rr/whitepapers/pda/

NIST had a draft proposal for some PDA handling guidelines on their site
a few months ago but it's not at this link anymore,
http://csrc.nist.gov/publications/drafts.html#sp800-72.  Perhaps it got
finalized or something...it seems like it should be out there someplace.

-----Original Message-----
From: Jon [mailto:jonbrownisme () yahoo com] 
Sent: Tuesday, February 08, 2005 8:10 AM
To: pen-test () securityfocus com
Subject: PDA pen testing question




I am looking into penetration testing of PDAs (Palm, Windows CE, Symbian
etc.) at the application and OS level and was wondering if anyone has
any knowlage in this area. Any pointers to tools, papers or other
resources would be great.

I was suprised that I could not find any real analysis of security
mechanisms and their effectiveness in Windows CE (at least at the level
of the @stake analysis of the Palm OS), but maybe I have not looked hard
enough...

Thanks, Jon