next up previous
Next: Conclusions Up: Security Analysis Previous: Protocol Issues

Miscellaneous Issues

Outdated Information: Typically handhelds have very limited storage, so most data is stored on the server. It may happen that security essential information on the server may be required or the information on the device is outdated hence a robust and timely syncing mechanism must be incorporated. Care must be taken to eliminate any malignant code contamination. Palms HotSync is good mechanism but at times malicious, perhaps some secure web-servers can be used through IML in Simputer and through web-clippings in Palm.
Audit Mechanism: The secure applications in real world must have an audit trail, so as to assess investigation if anything goes wrong. Simputer provides the traditional lnux log tools while audit software can log HotSyncs of Palm with a PC.
Business Processes: At most times security violation happen due to holes in business processes. Hence its important that the applications run on the devices and the business porcesses undergo a careful analysis with respect to security.



Vaibhav Bhandari 2001-11-29