Recent evolution of mobile technologies has opened new use possibilities for mobile devices. At the same time information security problems related to mobile devices have gotten more serious. More and more files e.g. pictures, music, games and office documents are loaded from the Internet to mobile devices. The purpose of this study is to investigate a possibility of remotely and securely transferring these files between the mobile device and home computer. Different security protocols are analysed and compared for mobile device use in wireless environments with a literary research. The focus on this study is also on information security threats related to mobile device use such as eavesdropping on the wireless communication, software vulnerabilities and stealing the device itself. The research problem is: how to maintain sufficient information security with remote file transfers between mobile device and personal computer? The research problem has been approached with a literary research and a constructive study. A web based file server is constructed and configured using open source software components and special attention is paid to information security. The information security of the construction is evaluated with STRIDE threat analysis, which lists threats concerned with different parts of the system. Also, the file server has been tested with security testing tools for completing the threat analysis. Based on the threat analysis and security testing, the construction is considered to be secure when properly used. However, new software vulnerabilities are discovered daily. Therefore, the information security of the setup weakens if not updated frequently. Also user made changes to configuration files, poor management of login information and careless use of devices are problems cause information security threats. The presented construction can be considered useful feature for mobile device user, if he or she understands the information security threats related to device use even at high level.
|Place of Publication||Oulu|
|Publication status||Published - 2007|
|MoE publication type||G2 Master's thesis, polytechnic Master's thesis|