Keep Your Mobile Device Safe for Ios User
Total Page:16
File Type:pdf, Size:1020Kb
Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User KEEP YOUR MOBILE DEVICE SAFE FOR iOS USER • Restrict Installation of Applications from Unknown Sources 1 • Set Strong Password and Screen Lock 2 • Use Up-to-date Anti-malware Security Software 3 • Update Operating Systems, Mobile Applications and Browsers 4 • Encrypt Your Mobile Device 5 • Remove Insecure and Unnecessary Wi-Fi Connection Profile 6 • Disable GPS and Location Services 7 • Remove Mobile Applications That Abuse Sensitive Permissions 8 • Perform Device Backup 9 • Completely Remove Data Before Giving Away Or Selling Your 10 Devices Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User Index 1. Restrict installation of applications from unknown sources ........................ 3 2. Set strong password and screen lock ........................................................ 4 3. Use Up-to-date Anti-malware Security Software ........................................ 7 4. Update Operating Systems, Mobile Applications and Browsers ................ 8 5. Encrypt your mobile device ..................................................................... 10 6. Remove insecure and unnecessary Wi-Fi connection profile................... 11 7. Disable GPS and location services .......................................................... 13 8. Remove mobile applications that abuse sensitive permissions ................ 15 9. Perform device backup ............................................................................ 16 10. Remove personal information before giving away or selling your iOS device ...................................................................................................... 17 Disclaimer ..................................................................................................... 18 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User Restrict Installation of Applications from Unknown 1 Sources RISK Mobile applications distributed from unknown sources have higher risk to contain malicious codes. CHECK iOS users can protect their mobile device from unknown source STEPS software by not "jailbreaking" the device. iOS only allows installation of mobile application via the official Apple App Store or the Apple's code signing mechanism. Tool(s) available Function: Detect jailbroken iOS device. iTools (Detect jailbroken iOS device, but originally designed for file management in iOS) Note: You can also identify jailbroken iOS device by manual check Search for common apps, such as "Cydia" and "Icy" that are installed after jailbreaking. Verify whether any default iOS apps are missing because default apps can be uninstalled on jailbroken iOS device only. MORE Recover jailbroken device by making reference to the official TIPS Apple website on Use iTunes to Restore Your iOS Device to Factory Settings. 3 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User Set Strong Password and Screen Lock 2 RISK Unauthorised person can access information in an unlocked mobile device without the owner's knowledge. CHECK System settings STEPS Purpose: Enable alphanumeric password protection and screen lock - Step 1: Go to Settings -> Tap Touch ID & Passcode and enter the current passcode if configured -> Tap Change Passcode and enter your old passcode when prompted -> Tap Passcode Options and Choose Custom Alphanumeric Code -> Enter a strong password and tap Next -> Re-enter the password and tap Done 4 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User Step 2: Go to Settings and tap Display & Brightness -> Tap Auto-Lock -> Tap 1 Minute -> Back to Settings -> Tap Touch ID & Passcode and enter the password - > Tap Require Passcode -> Tap Immediately 5 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User MORE Set strong password instead of 4 digit passcode for better TIPS security, as simple passcode could be easier to guess and trivially peeked by someone around you. Create passwords that are easy for you to remember but difficult for others to guess, with assistance of free online tools to learn and practice. Don't leave your mobile device unattended. 6 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User 3 Use Up-to-date Anti-malware Security Software RISK Mobile applications and files that look innocent can contain malicious codes and may not be easily noticed by user before it causes significant damages. CHECK iOS users can protect their mobile device from malware attack by STEPS not "jailbreaking" the device. iOS only allows installation of mobile application that has been approved by Apple. Apple reviews all applications in the official Apple App Store to filter out malicious software, so the risk of encountering malware on iOS device would be low. Note: In general, no security tool can perform full anti-malware scan on all files in an iOS device because Apple has enforced a process called sandboxing to prevent third party applications from accessing other application files or making changes to the device. MORE Stay alert to symptoms that might indicate a malware infection, TIPS such as battery drain, performance clogging, unusual large data usage, etc. Be aware that fake anti-malware software and rogue pop-up security alerts are popular ways for tricking users to download malware onto their devices. 7 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User Update Operating Systems, Mobile Applications and 4 Browsers RISK Mobile devices with known security weaknesses are more susceptible to malware infection and other cyber attacks. CHECK Tool(s) available STEPS Function: Detect outdated iOS, browser and program in mobile device. 1. Check and Secure website (Detect outdated Internet browser and plug-in) 2. iTunes / Over-the-air (Check for iOS updates) System settings Purpose: Enable automatic update of mobile application. Tap Settings and then tap iTunes & App Store -> Turn on Updates in the Automatic Downloads configuration list 8 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User MORE Uninstall end-of-support software products or upgrade to TIPS another software product that has security updates. Avoid performing sensitive operations, such as online banking, from a mobile device without security updates, as not all iOS devices will support the most recent version of iOS. Do not visit suspicious websites or follow the links provided in those websites, as they may force a browser to download files without user's knowledge. 9 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User 5 Encrypt Your Mobile Device RISK Data in a mobile device can be leaked out, if it is lost or stolen. CHECK By default, data encryption is already enabled for iPhone 3GS and STEPS later, and for all iPad models. However, you are advised to further secure your iOS device by protecting the encryption key with a strong password. MORE Use Find My iPhone feature that allows you to remotely track, TIPS lock or erase your iOS device in case it is lost or stolen. 10 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User Remove Insecure and Unnecessary Wi-Fi 6 Connection Profile RISK Mobile devices with insecure Wi-Fi connection profile have higher risks to join untrusted or spoofed Wi-Fi networks automatically. CHECK System Settings STEPS Purpose: Remove Wi-Fi network profile and disallow iOS device to rejoin remembered Wi-Fi network automatically. Step 1: Tap Settings and then tap Wi-Fi -> Turn off Ask to Join Networks 11 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User Step 2: Locate the Wi-Fi network to forget and tap the Detail Disclosure button -> Tap Forget this network -> Tap Forget Note: The Wi-Fi network must be in range for it to appear in the list of available networks to forget. If the Wi-Fi network is no longer in range, the user must reset all network settings, which will forget all Wi-Fi networks. MORE Avoid handling personal or sensitive information when using TIPS public Wi-Fi Disable wireless connection after use. 12 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User 7 Disable GPS and Location Services RISK Mobile device allow installed applications and visited websites the ability to know and track user location without users’ knowledge. CHECK System settings STEPS Purpose: Turn off Location Services - Tap Settings -> Tap Privacy -> Tap Location Services -> Turn off Location Services 13 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User MORE Remove applications required location tracking, if no TIPS operational needs. Disable GPS function and location services after use. 14 Cyber Security Information Portal (www.cybersecurity.hk) Keep Your Mobile Device Safe for iOS User 8 Remove Mobile Applications that Abuse Sensitive Permissions RISK Mobile applications, obtained sensitive permissions can perform high risk actions without user knowledge, such as enable camera and send SMS. CHECK iOS users can protect their mobile device from risky mobile STEPS applications by not “jailbreaking” the device and only downloading mobile applications