Monday,
February 10, 2003
|
|
Feature |
|
Mobile virus a
distant reality
Vibhor Sood
A
couple of weeks ago, mobile phone users received a mail warning about a
virus floating around the mobile world. According to this mail, if a
user received a call that displayed ACE-? in the caller display portion
then the call should immediately be disconnected as this call was
actually a virus, that could infect the mobile.
Is there actually a
possibility of a virus infecting cellphones? To understand the
possibility of such a situation we have to understand how a mobile phone
works. The most common of mobile phones use the wireless application
protocol (WAP). WAP is based on the same model as Web communications in
that a central server delivers code, which is run by a browser installed
on the mobile phone or organiser. It is important to note, though, that
there is nowhere on current WAP mobile devices where a virus can harbour
itself.
Unlike a PC, a WAP mobile
phone is not able to store the applications it uses. Also, there is no
way a virus would be able to spread to other WAP users. Current WAP-enabled
mobile phones do not allow for communication between ‘client’
phones. Simply put, code passes from the mobile phone company’s server
down to the users’ mobile phone, but not vice versa, or from one
mobile phone to another.
The bottom line in this
case is that mobile phones and WAP mobile devices are simply not
sophisticated enough to be infected at the present time. However,
consumer demand for increased functionality often means that
manufacturers are keen to develop the technology required to meet user
requirements. As these mobile devices become more complex, the
opportunities for viruses to infect them may also increase.
PDA problems
What about palmtop
computers and PDAs - Can they be infected by computer viruses? PDAs run
specially written scaled-down operating systems, such as EPOC, PalmOS or
PocketPC. They are often connected to home or office PCs to synchronise
the data between the two machines. This presents an opportunity for
viruses to spread onto them.
Yet, no viruses currently
exist for the PocketPC and EPOC operating systems, although there is no
technical reason why they could not be written. There is a virus called
Palm/Phage, which is able to infect Palm OS, but it is not in the wild
and poses little threat.
Nonetheless, it is
sensible to keep backups of any Palm applications and data. There is
also a Trojan horse known as Palm/Liberty-A, which is able to infect the
Palm OS. It deletes Palm OS applications and was distributed in the ‘Warez’
community. Like Phage, it is low risk and you are unlikely to ever
encounter it.
Future
Inevitably, the evolution
of mobile and PDA technology will bring with it the development of
further security. The issue here is where you implement anti-virus
measures. The most efficient way to protect mobile devices is to check
data when you transfer it to or from the device. For mobile phones, the
WAP gateway would be a good place to install virus protection. All
communications pass through this gateway, providing an ideal opportunity
for virus scanning.
As mobile phones become
increasingly interconnected, it will be difficult to police data
transfer at a central point. In the case of PDAs, one solution would be
to deploy anti-virus software during data synchronisation with a
conventional PC. Moving forward, there will be an increasing requirement
to put anti-virus software on individual phones and PDAs. However, this
can only happen when these devices have sufficient processing power and
memory.
Take it easy
It is easy to get carried
away with the threat of potential viruses on mobile devices. However,
much of the hype is unsubstantiated and based on speculation. There have
been some ludicrous suggestions about viruses. At the moment, because a
virus is limited by the functionality of the platform it infects, mobile
devices are just not sophisticated enough to allow widespread virus
infection.
The current trend seems to
be for people to worry about the potential threats of tomorrow, which
may never come to fruition, as opposed to the real risks of today. The
best advice to follow is to remain alert to what the dangers are right
here, right now and to protect against them. While you’re concerning
yourself about the future, you could be missing what’s right under
your nose.
|