Android BYOD Security based on Trusted Network Connect¶

An experimental BYOD version of the popular strongSwan Android VPN Client allows the collection of integrity measurements on Android 4.x devices. A special Android BYOD IMC written in Java communicates via the TNC IF-M 1.0 Measurement protocol with an Operating System IMV and a Port Scanner IMV. The strongSwan Android VPN Client transports the IF-M messages in IF-TNCCS 2.0 Client/Server protocol batches via the IF-T for Tunneled EAP Methods 1.1 Transport protocol protected by IKEv2 EAP-TTLS.

• Android VPN client configuration

Unrestricted Access (TNC recommendation allow)¶

• Successful connection

Restricted Access (TNC recommendation isolate)¶

• Non-Market-Apps Security Setting

• Install Web Server App

• Restricted connection

• Remediation instructions

• Detailed remediation instructions

Blocked Access (TNC recommendation block)¶

• Start Android Web Server

• Failed connection

• Remediation instructions

• Detailed remediation instructions