System and method for providing network security to mobile devices
A small piece of hardware connects to a mobile device and filters out attacks and malicious code. Using the piece of hardware, a mobile device can be protected by greater security and possibly by the same level of security offered by its associated corporation/enterprise. In one embodiment, a mobile security system includes a connection mechanism for connecting to a data port of a mobile device and for communicating with the mobile device; a network connection module for acting as a gateway to a network; a security policy for determining whether to forward content intended for the mobile device to the mobile device; and a security engine for executing the security policy.
1. A security system, comprising:
a runtime memory;
a connection mechanism configured to connect to a data port of a mobile device and configured to communicate with the mobile device, the mobile device having a mobile device processor;
a network connection module configured to receive content intended for the mobile device prior to execution by the mobile device;
security policies defining unacceptable malicious content;
a security engine configured to examine the content received by the network connection module for the unacceptable malicious content as defined by the security policies, the security engine configured to assign a weight value to the content based on a source of the content or on a category of the source of the content, the examining of the content by the security engine being based on the weight value assigned to the content, wherein the security policies are configured to mirror gateway security policies of a gateway on a trusted enterprise network; and
a security system processor configured to execute the security engine in the runtime memory, the security system processor being different than the mobile device processor.
2. The security system of claim 1 , wherein the security system is on a separate appliance removably coupled to the mobile device.
3. The security system of claim 1 , wherein the security engine provides gateway-level security services.
4. The security system of claim 1 , wherein the security engine provides firewall security services.
5. The security system of claim 1 , wherein the security engine provides malware protection security services.
6. The security system of claim 1 , wherein the security engine provides content-based security services.
7. The security system of claim 1 , further comprising remote management code configured to process an update command, the update command being an instruction to update the security engine or the security policies based on the gateway security engine or the gateway security policies on the trusted enterprise network.
8. The security system of claim 1 , wherein the weight value assigned to the content is based on a personal content profile.
9. The security system of claim 8 , wherein the security engine is further configured to monitor actions of a user over a predetermined time to generate the personal content profile.
10. The security system of claim 1 , wherein the connection mechanism includes at least one of a USB connector, a PCMCIA connector, an Ethernet connector, and a wireless communication module.
11. The security system of claim 1 , wherein the network connection module includes a wireless network interface card.
12. The security system of claim 1 , wherein the security engine includes at least one of an antivirus engine, an antispyware engine, a firewall engine, an IPS/IDS engine, a content filtering engine, a multilayered security monitor, a bytecode monitor, and a URL monitor.
13. A method of a security system, the security system including a security system processor, the method comprising:
receiving, by a security system, content intended for a mobile device prior to processing by the mobile device, the mobile device including a mobile device processor, the security system including a security system processor different than the mobile device processor;
assigning a weight value to the content based on a source of the content or on a category of the source of the content;
examining the content for unacceptable malicious content as defined by security policies, the examining being based on the weight value assigned to the content, the security policies being configured to mirror gateway security policies of a gateway on a trusted enterprise network; and
allowing the mobile device to process the content when the content is found to have no unacceptable malicious content as defined by the security policies.
14. The method of claim 13 , wherein the security system is on a separate appliance removably coupled to the mobile device.
15. The method of claim 13 , wherein the security system provides gateway-level security services.
16. The method of claim 13 , wherein the security system provides firewall security services.
17. The method of claim 13 , wherein the security system provides malware protection security services.
18. The method of claim 13 , wherein the security system provides content-based security services.
19. The method of claim 13 , further comprising processing an update command to update the security system based on the gateway security policies on the trusted enterprise network.
20. The method of claim 13 , wherein the weight value assigned to the content is based on a personal content profile.
21. The method of claim 13 , further comprising monitoring actions of a user over a predetermined time to generate the personal content profile.
22. The method of claim 13 , wherein the security system is connected to the mobile device over at least one of a USB connector, a PCMCIA connector, an Ethernet connector, and a wireless communication module.
23. The method of claim 13 , wherein the security system is connected to the mobile device over a wireless network interface card.
24. The method of claim 13 , wherein the security system includes at least one of an antivirus engine, an antispyware engine, a firewall engine, an IPS/IDS engine, a content filtering engine, a multilayered security monitor, a bytecode monitor, and a URL monitor.