• OperatorRoundtable
  • PanelPanel
  • Speaker HighlightSpeaker Highlight
  • 09.00
  • Introductory speech and speed networking: Meet your fellow attendees and swap business cards in a relaxed and informal setting

  • 09.05
  • Chairman’s speech / industry overview

  • David Rogers, Director of External Relations, OMTP
  • Topic
  • KEYNOTES: MOBILE SECURITY LANDSCAPE: CURRENT REALITY

  • 09.15
  • Chairman interview – what are the essential mobile security risks for the Public Sector, and how can the industry prevent these breaches of mobile security?

  • David Rogers interviews Charles Brookson, Chairman, ETSI OCG Security
  • 09.45
  • GSMA: Analysing the association approach to current mobile security threats

  • James Moran, Fraud and Security Director, Security Group, GSMA, UK
    • GSM Association algorithms and protocols, technical security aspects of customer, and recommended infrastructure solutions to combat fraud
  • Topic
  • CORPORATE SECURITY COMPLIANCE ON THE MOVE: IMPACTS ON ENTERPRISE SECURITY

  • 10.15
  • Security as a matter of management responsibility

  • Storm Jarl Landaasen, Division Head of Security, Telenor Business, Norway
    • Establishing the main aims of hackers and data harvesters
    • What security protection does technology afford us?
    • Analysing the user-patterns of different sector customers; timeframes for company and customer survival without adequate security protection
    • Determining the right level of security on an individual company basis
    • Establishing an effective line of command/responsibility for security policy implementation
    • What is going on out there? When will security attacks hit our mobile device – or have they already?
  • 10.45
  • Company wireless policy regarding mobile devices

    Extending security of your Information Systems to accommodate mobile technology is a challenge that is not well understood by many and consequently associated risks and complexities are often miscalculated
  • Sinisha Patkovic, Senior Manager, BlackBerry Security - EMEA, Research In Motion (RIM)
    • How organizations can set and implement corporate security policies for mobile technology, supported by real-world case studies
    • Technologies and techniques for mitigating risks, as well as lessons learned from trying to mobilize an organization’s information
    • The importance of innovation in the security domain, including a demonstration of a two-factor authentication smartcard
  • 11.15
  • Refreshments and networking break

  • 11.45
  • Panel discussion: Securing corporate VPN’s and best practice external IT practices for data on the move

  • Mark Blowers, Enterprise Architectures Practice Director, Butler Group, UK
  • Keith Dempster, Partner, Kerman and co LLP, UK
  • Storm Jarl Landaasen, Division Head of Security, Telenor Business, Norway
    • Effectively securing sensitive information across shared and converged networks
    • How can device content be protected through a combination of hardware, software and executive policy for the everyday user?
    • Assessing over-the-air encryption options: IPsec tunnelling to a corporate VPN gateway; Wi-Fi data encryption using WPA/WPA2; other methods deterring eavesdropping on messages in transit
    • What are the benefits and drawbacks of one time passwords, fixed codes and token-based systems, all-time access, and kill-pill final solutions?
    • How can employee use of third-party applications, IM and Bluetooth, be best utilised and controlled?
  • 12.30
  • Analysing the cost of data leakage and establishing effective intrusion/extrusion policy

  • Paul Ruppert, Editor and Senior Consultant, Mobile Point View, US
    • From intrusion to extrusion – determining the importance of extrusion by looking at high profile leakages, moles, and financial impacts of data loss.
    • What are the best DLP methods to security at MNO’s and corporates at large?
  • 13.00
  • Lunch Break

  • 14.00
  • Post-lunch industry brain-storm: chance to meet your industry peers!

    • Find your allocated table and meet with other security executives to discuss the most pressing questions of the mobile security industry for thirty minutes, before reporting your solutions back to the chairman. The best security solution presentations will (at the discretion of the chairman) receive a prize at the mobile security awards ceremony at the end of the day!
  • Topic
  • FOUNDATIONS OF SECURITY

  • 15.00
  • Securing fixed-to-mobile convergence

  • Colin Blanchard , Security Risk and Compliance Director, British Telecoms, UK
    • Risk-analysis of increasing mobility across the home. (Femtocells, WCDMA, WIFI – and shared operator cost and gain)
    • Prevention of unsolicited communication (abuse of low-cost SMS and spam over internet telephony and other technologies)
    • VOIP – the security risks of IP telephony and how the gaps can be closed
  • 15.30
  • Cracking the Oyster: Assessing the security of the RFID tag

  • Radboud University Digital Security Group, Netherlands
    • Establishing the work of the Radboud University Digital Security Group
    • Assessing the impact of the Mifare Classic exposure – is it right to expose security flaws? What would be the future impact if results had not been published?
    • What are the positive mobile security developments following security R&D? – the next steps for smart card security development and vertical integration sectors utilising RFID tag technology
  • 16.00
  • Refreshments and networking break

  • 16.30
  • Optimising the handset device without compromising security

  • Janne Uusilehto , Head of Nokia Product Security, Nokia, Global
    • Advanced operating systems and how they are dealing with security
    • Device loss, CAC cards, and ensuring untouchable data at all times
    • The impact of smart phones; corporate usage, security levels, and
    • balancing sexiness with security risk!
  • 17.00
  • The role of the SIM: Will mobile trusted modules and secure elements supersede the UICC?

  • Tim Wright , Priciple Staff Engineer, Platform Security, Motorola Mobile Devices, UK
    • Recap of use of trusted modules and secure element
    • Strengths and weakness of the UICC vs trusted modules/secure elements
    • Operator concerns with replacement of UICCs
    • Standardisation initiatives - SA3 Machine to Machine (M2M), ETSI SCP non-removable UICC, 3GPP LTE requirements for USIM application from non-LTE handsets
    • The LTE and NGMN opportunity for v small low cost terminals as a driver for integrated USIM
    • Conclusions
  • 17.30
  • Panel discussion: Mobile security through diversification or standardisation? Costs and opportunities in OS and proprietary programmes

  • Darryl Champagne, Mobile Open Source Technology Evangelist, Funambol, Inc., U.S
  • Hadi Nahari, Principal Security Architect, eBay, Inc., U.S
  • Craig Heath, Principal Product Manager for Security and Privacy, Symbian Limited, UK
    • Open source vs. proprietary security solutions: what is the pay-off between functionality and integrity?
    • Educating end-users: assessing the common perception of mobile devices as a benign object as a role in securing mobile content security
    • Determining the need for a common regulator of security solutions, legal back-up and potential standardisation to security innovation
    • Best practice combination of trusted execution environments and open source – common examples and future hopes
  • 18.15
  • End day one. Chairman summary Security solutions awards ceremony