Tuesday, September 16, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Micron M600 SSD Released With Dynamic SLC Cache
Orange to Buy Spanish Operator Jazztel
US Government Data Requests Increased: Google
Wi-Fi Alliance Enhances Wi-Fi CERTIFIED Wi-Fi Direct
Canon Develops New Wireless Device For Storing Photos
Google Adds A Steering Wheel To Its Self-Driving Cars
MediaTek Launches Low -power MT7628 SoC for Routers And IoT Gateways
SanDisk Introduces Ultra-fast, High-Capacity microSD UHS-I Memory Card
Active Discussions
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
IBM supercharges Power servers with graphics chips
Werner Vogels: four cloud computing trends for 2014
Video editing software.
 Home > News > Mobiles > Samsung...
Last 7 Days News : SU MO TU WE TH FR SA All News

Monday, January 13, 2014
Samsung Denies Vulnerability In KNOX


Samsung has denied a reported vulnerability on a Samsung Galaxy S4 device with the KNOX security platform.

Last month, security researchers at Ben-Gurion University Cyber Security Labs said that they had identified a critical vulnerability in highly secure Samsung mobile devices which are based on the Knox architecture. The breach, researchers believe, enables easy interception of data communications between the secure container and the external world including file transfers, emails and browser activity.

Samsung said that after collaborating with Google and having discussed the research with the original researchers, the company has verified that "the exploit uses legitimate Android network functions in an unintended way to intercept unencrypted network connections from/to applications on the mobile device." Samsung said the research did not identify a flaw or bug in Samsung KNOX or Android; "it demonstrated a classic Man in the Middle (MitM) attack, which is possible at any point on the network to see unencrypted application data."

Samsung and Google said that such attacks can be prevented if apps are built to support Secure Sockets Layer (SSL) encryption. In additio, such issues can be addressed through the proper configuration of mechanisms available in Knox.

The configuration settings Samsung said would prevent the attack from working include Knox?s mobile device management feature, which can lock down security-sensitive device settings; and "per-app VPN", which forces traffic from a designated app through a VPN tunnel. KNOX implements a FIPS 140-2 Level 1 certified VPN client, a NIST standard for data-in-transit protection along with NSA suite B cryptography.




Previous
Next
Acer CEO Blames Ultrabook Strategy For Company's Weak Results        All News        Samsung Display Showcased Foldable Display Prototype At CES
Sony Introduces The Xperia E1 And The Xperia T2 Ultra Smartphones     Mobiles News      Competition Among U.S. Mobile Carriers Escalates

Get RSS feed Easy Print E-Mail this Message

Related News
New Samsung NX1 Launches With APS-C backside-illuminated CMOS
Korean Authorities To Inverstigate LG-Samsung Dispute
Samsung Open Source Conference Kicks off Tuesday
Diesel Black Gold Introduces Custom Samsung Gear S at Runway Show
Samsung Outlines Its Vision for the Future Home At IFA 2014
Samsung Launches Tizen Wearable SDK for Gear S
Samsung Galaxy Tab Active Announced At IFA
Samsung Goes Curvy At IFA 2014
Samsung Partners With Oculus On Gear VR, Announces Galaxy Note 4 And Galaxy Edge at IFA 2014
Samsung Acquires Canadian Cloud Solution Provider
Samsung Introduces First Curved Soundbar For TVs
Samsung Partners with Nike On Running App

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .