Welcome!

Apache Authors: Elizabeth White, Pat Romanski, Liz McMillan, Christopher Harrold, Janakiram MSV

Blog Feed Post

Big Samsung News Today: Must-have security features you will want on your device

By

Samsung KNOX is the kind of comprehensive game changing security and mobile risk management solution the community has been calling out for. It was one of the features announced at today’s rollout of the Samsung Galaxy S4. There are several sources of information on the capabilities of this system, including:

A summary of reporting from that page is below:

Samsung KNOX is the comprehensive enterprise mobile solution for work and play. With increasing use of the smartphones in business, it addresses mobile security needs of enterprise IT without invading privacy of employees.

  • Platform Security
    Samsung KNOX addresses platform security with a comprehensive strategy.
  • Application Security
    Samsung KNOX addresses security requirement for enterprise applications and data.
  • Mobile Device Management
    Samsung KNOX works with enterprise preferred MDM vendor solutions.
  • Samsung KNOX for Enterprise
    Samsung KNOX provides reassurance and convenience for IT departments looking to implement and manage Bring Your Own Device (BYOD) strategies.

Platform Security

Samsung KNOX addresses platform security with a comprehensive strategy: Hardward baked in Secure Boot, ARM TrustZone based Integrity Measurement Architecture and Kernel with built in Security Enhanced Android Mandatory Access Controls to secure the system.

Secure BootSecure boot ensures that only verified and authorized software can run on the device. Secure boot is one of the main components that forms the first line of defense against malicious attacks on devices with KNOX solution.Security Enhanced AndroidSE Android provides an enhanced mechanism to enforce the separation of information based on confidentiality and integrity requirements. It isolates applications and data into different domains so that reduces threats of tampering and bypassing of application security mechanisms and also minimizes the amount of damage that can be caused by malicious or flawed applications.TrustZone-based Integrity Measurement ArchitectureTIMA runs in the secure-world and provides non-by passable, continuous integrity monitoring of the Linux kernel. When TIMA detects that the integrity of the kernel or the boot loader is violated, it takes a policy-driven action in response. One of the policy actions disables the kernel and powers down the device.

Application Security

In addition to securing the platform, Samsung KNOX solution addresses enterprise application and data security require-ments. KNOX container provides security for enterprise data by isolating enterprise applications and encrypting enterprise data both at rest and in motion.

KNOX ContainerKNOX Container is an isolated and secure environment within the mobile device, complete with its own home screen, launcher, applications, and widgets. Applications and data inside the container are separated from applications outside the container. This enables a powerful solution for the “data leakage problem” associated with the BYOD model.Encrypted File SystemKNOX container uses a separate encrypted file system completely isolated from applications outside the container. The data is encrypted using an Advanced Encryption Standard (AES) cipher algorithm with a 256-bit key(AES-256).Virtual Private NetworkKNOX container offers on demand FIPS certified VPN client. KNOX VPN client profiles are pushed by enterprise. In addition, enterprise can also select which apps inside the container are required to use the VPN. The VPN automatically starts when a user launches any of enterprise designated apps. KNOX container VPN offers support for strong IPSec VPN encryption for most sensitive government agencies, including support for Suite B cryptography.

Mobile Device Management

Samsung KNOX works with enterprise preferred MDM vendor solutions and provides industry leading security and management controls.

Samsung KNOX for Enterprise

Samsung KNOX for IT Managers
Data leakage, malware & malicious attacks: comprehensive protection
Samsung KNOX is security hardening of Android from ground up and protects the enterprise data and applications. It prevents from system exploits and devi-ce compromise. Lightweight and compatible with the existing enterprise infrastructure such as MDM, VPN and directory services, KNOX provides reassurance and convenience for IT departments looking to implement and manage Bring Your Own Device (BYOD) strategies.Samsung KNOX for Employees
Using personal mobiles for work
Samsung KNOX offers a seamless and intuitive dual-persona platform for at work and at home. KNOX container comforts users as their privacy and personal properties are in tact.Samsung KNOX for Partners
Samsung KNOX – an easier way to manage mobiles
Samsung KNOX enables existing Android eco-system applications to automatically gain Enterprise integration and validated, robust security with zero change to the application source code. Samsung KNOX relieves application developers from the burden of developing individual enterprise features such as FIPS compliant VPN, on-device encryption, and Enterprise Single Sign On (SSO).

Read the original blog entry...

More Stories By Bob Gourley

Bob Gourley writes on enterprise IT. He is a founder of Crucial Point and publisher of CTOvision.com

IoT & Smart Cities Stories
DXWordEXPO New York 2018, colocated with CloudEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
@DevOpsSummit at Cloud Expo, taking place November 12-13 in New York City, NY, is co-located with 22nd international CloudEXPO | first international DXWorldEXPO and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time t...
Headquartered in Plainsboro, NJ, Synametrics Technologies has provided IT professionals and computer systems developers since 1997. Based on the success of their initial product offerings (WinSQL and DeltaCopy), the company continues to create and hone innovative products that help its customers get more from their computer applications, databases and infrastructure. To date, over one million users around the world have chosen Synametrics solutions to help power their accelerated business or per...
When talking IoT we often focus on the devices, the sensors, the hardware itself. The new smart appliances, the new smart or self-driving cars (which are amalgamations of many ‘things'). When we are looking at the world of IoT, we should take a step back, look at the big picture. What value are these devices providing. IoT is not about the devices, its about the data consumed and generated. The devices are tools, mechanisms, conduits. This paper discusses the considerations when dealing with the...
Charles Araujo is an industry analyst, internationally recognized authority on the Digital Enterprise and author of The Quantum Age of IT: Why Everything You Know About IT is About to Change. As Principal Analyst with Intellyx, he writes, speaks and advises organizations on how to navigate through this time of disruption. He is also the founder of The Institute for Digital Transformation and a sought after keynote speaker. He has been a regular contributor to both InformationWeek and CIO Insight...
Machine learning has taken residence at our cities' cores and now we can finally have "smart cities." Cities are a collection of buildings made to provide the structure and safety necessary for people to function, create and survive. Buildings are a pool of ever-changing performance data from large automated systems such as heating and cooling to the people that live and work within them. Through machine learning, buildings can optimize performance, reduce costs, and improve occupant comfort by ...
Digital Transformation is much more than a buzzword. The radical shift to digital mechanisms for almost every process is evident across all industries and verticals. This is often especially true in financial services, where the legacy environment is many times unable to keep up with the rapidly shifting demands of the consumer. The constant pressure to provide complete, omnichannel delivery of customer-facing solutions to meet both regulatory and customer demands is putting enormous pressure on...
Bill Schmarzo, Tech Chair of "Big Data | Analytics" of upcoming CloudEXPO | DXWorldEXPO New York (November 12-13, 2018, New York City) today announced the outline and schedule of the track. "The track has been designed in experience/degree order," said Schmarzo. "So, that folks who attend the entire track can leave the conference with some of the skills necessary to get their work done when they get back to their offices. It actually ties back to some work that I'm doing at the University of San...
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...