Project

General

Profile

Android BYOD Security based on Trusted Network Connect » History » Version 8

Andreas Steffen, 21.02.2013 21:46

1 1 Andreas Steffen
h1. Android BYOD Security based on Trusted Network Connect
2 1 Andreas Steffen
3 3 Andreas Steffen
An experimental "BYOD version":http://www.strongswan.org/byod/strongswan-byod-1.2.0.apk of the popular "strongSwan Android VPN Client":https://play.google.com/store/apps/details?id=org.strongswan.android allows the collection of integrity measurements on Android 4.x devices. A special Android BYOD IMC written in Java communicates via the TNC IF-M 1.0 Measurement protocol with an Operating System IMV and a Port Scanner IMV. The strongSwan Android VPN Client transports the IF-M messages in IF-TNCCS 2.0 Client/Server protocol batches via the IF-T for Tunneled EAP Methods 1.1 Transport protocol protected by IKEv2 EAP-TTLS.
4 2 Andreas Steffen
5 2 Andreas Steffen
* "Android VPN client configuration":http://www.strongswan.org/byod/strongswan-config.png
6 2 Andreas Steffen
7 2 Andreas Steffen
h2. Unrestricted Access (TNC recommendation allow)
8 2 Andreas Steffen
9 2 Andreas Steffen
* "Successful connection":http://www.strongswan.org/byod/screenshot-01-connected.png
10 2 Andreas Steffen
11 2 Andreas Steffen
h2. Restricted Access (TNC recommendation isolate)
12 2 Andreas Steffen
13 8 Andreas Steffen
* "Non-Market-Apps Security Setting":http://www.strongswan.org/byod/screenshot-09-non-market-apps-setting.png
14 6 Andreas Steffen
15 7 Andreas Steffen
* "Install Web Server App":http://www.strongswan.org/byod/screenshot-10-kws-webserver.png
16 6 Andreas Steffen
17 2 Andreas Steffen
* "Restricted connection":http://www.strongswan.org/byod/screenshot-02-restricted.png
18 2 Andreas Steffen
19 2 Andreas Steffen
* "Remediation instructions":http://www.strongswan.org/byod/screenshot-03-restricted-remediation.png
20 2 Andreas Steffen
21 2 Andreas Steffen
* "Detailed remediation instructions":http://www.strongswan.org/byod/screenshot-04-restricted-remediation-details.png
22 2 Andreas Steffen
23 2 Andreas Steffen
h2. Blocked Access (TNC recommendation block)
24 2 Andreas Steffen
25 5 Andreas Steffen
* "Start Android Web Server":http://www.strongswan.org/byod/screenshot-08-webserver-active.png
26 4 Andreas Steffen
27 2 Andreas Steffen
* "Failed connection":http://www.strongswan.org/byod/screenshot-05-failure.png
28 2 Andreas Steffen
29 2 Andreas Steffen
* "Remediation instructions":http://www.strongswan.org/byod/screenshot-06-failure-remediation.png
30 2 Andreas Steffen
31 2 Andreas Steffen
32 2 Andreas Steffen
* "Detailed remediation instructions":http://www.strongswan.org/byod/screenshot-07-failure-remediation-details.png