RE: PDA pen testing question

From: Jerry Shenk (jshenk@decommunications.com)
Date: Tue Feb 08 2005 - 10:17:52 EST


Something on this page might be helpful:
http://www.sans.org/rr/whitepapers/pda/

NIST had a draft proposal for some PDA handling guidelines on their site
a few months ago but it's not at this link anymore,
http://csrc.nist.gov/publications/drafts.html#sp800-72. Perhaps it got
finalized or something...it seems like it should be out there someplace.

-----Original Message-----
From: Jon [mailto:jonbrownisme@yahoo.com]
Sent: Tuesday, February 08, 2005 8:10 AM
To: pen-test@securityfocus.com
Subject: PDA pen testing question

I am looking into penetration testing of PDAs (Palm, Windows CE, Symbian
etc.) at the application and OS level and was wondering if anyone has
any knowlage in this area. Any pointers to tools, papers or other
resources would be great.

I was suprised that I could not find any real analysis of security
mechanisms and their effectiveness in Windows CE (at least at the level
of the @stake analysis of the Palm OS), but maybe I have not looked hard
enough...

Thanks, Jon



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:15 EDT