- 08.30
Registration & Refreshments
- 09.00
Introductory speech and speed networking: Meet your fellow attendees and swap business cards in a relaxed and informal setting
- 09.05
- David Rogers, Director of External Relations, OMTP
Chairman’s speech / industry overview
- Topic
KEYNOTES: MOBILE SECURITY LANDSCAPE: CURRENT REALITY
- 09.15
- David Rogers interviews Charles Brookson, Chairman, ETSI OCG Security
Chairman interview – what are the essential mobile security risks for the Public Sector, and how can the industry prevent these breaches of mobile security?
- 09.45
- James Moran, Fraud and Security Director, Security Group, GSMA, UK
- GSM Association algorithms and protocols, technical security aspects of customer, and recommended infrastructure solutions to combat fraud
GSMA: Analysing the association approach to current mobile security threats
- Topic
CORPORATE SECURITY COMPLIANCE ON THE MOVE: IMPACTS ON ENTERPRISE SECURITY
- 10.15
- Storm Jarl Landaasen, Division Head of Security, Telenor Business, Norway
- Establishing the main aims of hackers and data harvesters
- What security protection does technology afford us?
- Analysing the user-patterns of different sector customers; timeframes for company and customer survival without adequate security protection
- Determining the right level of security on an individual company basis
- Establishing an effective line of command/responsibility for security policy implementation
- What is going on out there? When will security attacks hit our mobile device – or have they already?
Security as a matter of management responsibility
- 10.45
- Sinisha Patkovic, Senior Manager, BlackBerry Security - EMEA, Research In Motion (RIM)
- How organizations can set and implement corporate security policies for mobile technology, supported by real-world case studies
- Technologies and techniques for mitigating risks, as well as lessons learned from trying to mobilize an organization’s information
- The importance of innovation in the security domain, including a demonstration of a two-factor authentication smartcard
Company wireless policy regarding mobile devices
Extending security of your Information Systems to accommodate mobile technology is a challenge that is not well understood by many and consequently associated risks and complexities are often miscalculated- 11.15
Refreshments and networking break
- 11.45
- Mark Blowers, Enterprise Architectures Practice Director, Butler Group, UK
- Keith Dempster, Partner, Kerman and co LLP, UK
- Storm Jarl Landaasen, Division Head of Security, Telenor Business, Norway
- Effectively securing sensitive information across shared and converged networks
- How can device content be protected through a combination of hardware, software and executive policy for the everyday user?
- Assessing over-the-air encryption options: IPsec tunnelling to a corporate VPN gateway; Wi-Fi data encryption using WPA/WPA2; other methods deterring eavesdropping on messages in transit
- What are the benefits and drawbacks of one time passwords, fixed codes and token-based systems, all-time access, and kill-pill final solutions?
- How can employee use of third-party applications, IM and Bluetooth, be best utilised and controlled?
Panel discussion: Securing corporate VPN’s and best practice external IT practices for data on the move
- 12.30
- Paul Ruppert, Editor and Senior Consultant, Mobile Point View, US
- From intrusion to extrusion – determining the importance of extrusion by looking at high profile leakages, moles, and financial impacts of data loss.
- What are the best DLP methods to security at MNO’s and corporates at large?
Analysing the cost of data leakage and establishing effective intrusion/extrusion policy
- 13.00
Lunch Break
- 14.00
- Find your allocated table and meet with other security executives to discuss the most pressing questions of the mobile security industry for thirty minutes, before reporting your solutions back to the chairman. The best security solution presentations will (at the discretion of the chairman) receive a prize at the mobile security awards ceremony at the end of the day!
Post-lunch industry brain-storm: chance to meet your industry peers!
- Topic
FOUNDATIONS OF SECURITY
- 15.00
- Colin Blanchard , Security Risk and Compliance Director, British Telecoms, UK
- Risk-analysis of increasing mobility across the home. (Femtocells, WCDMA, WIFI – and shared operator cost and gain)
- Prevention of unsolicited communication (abuse of low-cost SMS and spam over internet telephony and other technologies)
- VOIP – the security risks of IP telephony and how the gaps can be closed
Securing fixed-to-mobile convergence
- 15.30
- Radboud University Digital Security Group, Netherlands
- Establishing the work of the Radboud University Digital Security Group
- Assessing the impact of the Mifare Classic exposure – is it right to expose security flaws? What would be the future impact if results had not been published?
- What are the positive mobile security developments following security R&D? – the next steps for smart card security development and vertical integration sectors utilising RFID tag technology
Cracking the Oyster: Assessing the security of the RFID tag
- 16.00
Refreshments and networking break
- 16.30
- Janne Uusilehto , Head of Nokia Product Security, Nokia, Global
- Advanced operating systems and how they are dealing with security
- Device loss, CAC cards, and ensuring untouchable data at all times
- The impact of smart phones; corporate usage, security levels, and
- balancing sexiness with security risk!
Optimising the handset device without compromising security
- 17.00
- Tim Wright , Priciple Staff Engineer, Platform Security, Motorola Mobile Devices, UK
- Recap of use of trusted modules and secure element
- Strengths and weakness of the UICC vs trusted modules/secure elements
- Operator concerns with replacement of UICCs
- Standardisation initiatives - SA3 Machine to Machine (M2M), ETSI SCP non-removable UICC, 3GPP LTE requirements for USIM application from non-LTE handsets
- The LTE and NGMN opportunity for v small low cost terminals as a driver for integrated USIM
- Conclusions
The role of the SIM: Will mobile trusted modules and secure elements supersede the UICC?
- 17.30
- Darryl Champagne, Mobile Open Source Technology Evangelist, Funambol, Inc., U.S
- Hadi Nahari, Principal Security Architect, eBay, Inc., U.S
- Craig Heath, Principal Product Manager for Security and Privacy, Symbian Limited, UK
- Open source vs. proprietary security solutions: what is the pay-off between functionality and integrity?
- Educating end-users: assessing the common perception of mobile devices as a benign object as a role in securing mobile content security
- Determining the need for a common regulator of security solutions, legal back-up and potential standardisation to security innovation
- Best practice combination of trusted execution environments and open source – common examples and future hopes
Panel discussion: Mobile security through diversification or standardisation? Costs and opportunities in OS and proprietary programmes
- 18.15


Roundtable
Panel
Speaker Highlight