Cyberstudy
PDF p.271 In progress

Cellular and GPS Connection Methods

Open PDF at p.271 9 flashcards

Summary

PDF p.271

Mobile devices use various connection methods for local and personal area networks and Internet access. Cellular data connections and GPS are key methods, each with specific security considerations.

In plain words

Supplementary — not from your PDF

Cellular data bypasses the corporate network and its protections, so security has to live on the device: VPN, MDM, mobile threat defense, DLP and user awareness. GPS positions devices from satellites (with A-GPS using cell towers to speed it up). Other systems are Galileo, GLONASS and BeiDou. GPS signals can be jammed or spoofed, which can defeat geofencing.

Detailed explanation

PDF p.271
  • Cellular/Mobile Data Connections
    • Usage: Smartphones, tablets, and laptops use mobile data networks for communication.
    • Security: Mobile data connections bypass enterprise network protections, requiring endpoint controls to ensure data security and privacy.
    • Technologies: User awareness, VPNs, MDM, mobile threat defense, and DLP protect cellular data connections.
  • Global Positioning System (GPS)
    • Function: GPS sensors triangulate device positions using signals from GPS satellites.
    • Assisted GPS (A-GPS): Uses cell tower data to speed up triangulation, adjusting for device position relative to the tower.
    • Satellite Systems: GPS (US), Galileo (EU), GLONASS (Russia), BeiDou (China).
    • Vulnerabilities: GPS signals can be jammed or spoofed, potentially defeating geofencing mechanisms.

Important terms

taken from the text above
Technologies
User awareness, VPNs, MDM, mobile threat defense, and DLP protect cellular data connections.
Assisted GPS (A-GPS)
Uses cell tower data to speed up triangulation, adjusting for device position relative to the tower.
Satellite Systems
GPS (US), Galileo (EU), GLONASS (Russia), BeiDou (China).
GPS Global Positioning System A-GPS Assisted GPS

Examples & real-world scenarios

Supplementary — not from your PDF
  • An always-on VPN for phones using cellular data.
  • A-GPS locating a phone faster in a city.
  • Geofencing combined with other checks in case GPS is spoofed.

Scenario

A company relies only on GPS geofencing to allow access to an app on site. Because GPS can be spoofed, adding network location or device certificates makes the control harder to fake.

Common mistakes

Supplementary — not from your PDF
  • Assuming the corporate firewall protects phones on cellular data.
  • Treating GPS location as completely trustworthy.

Practical skills

Supplementary — not from your PDF
  • List endpoint controls needed when devices bypass the corporate network.

What I should remember

Key Points PDF p.271
  • Cellular Data Connections
    • Endpoint Controls: Implement user awareness, VPNs, MDM, mobile threat defense, and DLP.
    • Security: Ensure data security and privacy over cellular networks.
  • GPS
    • Triangulation: Uses satellite signals to determine device position.
    • A-GPS: Enhances GPS with cell tower data.
    • Satellite Systems: Includes GPS, Galileo, GLONASS, BeiDou.
    • Vulnerabilities: GPS signals can be jammed or spoofed.