Marble Security and MobileIron deliver risk mitigation for apps

David Jevans
David Jevans

Marble Security announced on June 12 a technology alliance and partner agreement to deliver Marble’s app risk mitigation to the MobileIron enterprise mobility management (EMM) platform for Android, iPhone and iPad devices. The tightly integrated joint solution is immediately available.

“Our customers want to provide mobile business apps that employees love, but they face the challenge of securing those apps that reside on devices alongside personal apps, especially in bring your own device (BYOD) environments,” said Sean Convery, vice president of product management at MobileIron. “Marble is a natural addition to the MobileIron ecosystem as its solution provides visibility into the risk presented by apps installed on a managed device.”

Enterprise users routinely expose their employers’ data and network security by unknowingly installing malicious apps onto their own devices or by giving mobile apps sweeping permissions to download and use information stored on the device or accessed from the corporate network. Marble Labs, the research and response team of analysts at Marble Security, has developed a clear picture of the mobile threat to enterprises based on the analysis of more than 1.2 million apps for malware and risky behavior using a combination of static, dynamic and behavioral analysis. Threats run the gamut from stealing login credentials to tracking the location of executives. Malicious apps can take users to phishing sites or command and control botnets.

A significant threat according to Marble Labs’ research is that 30 percent of apps are capable of leaking users’ private data and exhibit risky behaviors. Mobile users routinely give permissions for apps to access and use their contacts, text messages and emails. Once uploaded to the app provider, the information can no longer be controlled and can fall into the hands of hackers to help target other employees, like system admins or executives and create personalized, highly effective spear phishing attacks.

“Marble Security understands the real scoop on the mobile threatscape,” said Marble Security Founder and chief technology officer, David Jevans. “We continuously correlate exclusive threat data from our own mobile security labs based on three types of analysis with a range of external resources including a network threat database to provide the industry’s clearest picture on the dynamic risks posed by mobile apps.”

View Marble Labs’ latest Mobile App Threat Report on the riskiest app categories here. A new report, comparing iOS and Android devices and looking at the risk to enterprises, will be released mid-June.

Marble App Risk Mitigation and Marble Mobile Risk Score (MMRS) provide defense in depth against these threats migrating toward applications with device proliferation.