The PDA as a Threat Vector

Personal Digital Assistants (PDAs) have been steadily increasing in numbers since their inception in the early 1990s. Explosive growth in their numbers, particularly within the enterprise, is expected during the next three years. This presents a number of management challenges, both operational and technical. This paper addresses the threat to information security posed by the PDA (including related devices such as smartphones). It discusses the drivers behind the PDA's increasing numbers and the changing nature of PDA use. The changing threat profile of the PDA is examined and specific threats and areas of weakness are explored in detail. Methods for securing PDA's within an organization, including management approaches and technical measures are considered. Finally, the opportunities which the PDA may present to security management are also examined. This paper assumes that the reader has a basic understanding of IT security and PDA technology, but in-depth technical understanding of the issues discussed is not required.