Hey.
Theft in the modern world is gradually moving into the virtual space, following the money, which is now not pieces of paper in your wallet, but zeros and ones written in the memory of devices. The future has arrived much faster than one could have guessed even ten years ago, when paper money was the main means of payment in stores, and your wallet remained a coveted prey for a thief. Today, the share of non-cash payments in Russia is 70%; by the end of 2021, the Bank of Russia expects to grow to 75%. No one is surprised when at the checkout a person puts a watch or smartphone to the terminal, such a scene has become commonplace. I can say for myself that I need cash less and less, once a month I withdraw a small amount for unforeseen expenses.
In addition to the fact that our wallets have settled in smartphones, our whole life is contained there in its digital reflection – photos, communication, letters and access to social networks and other accounts. This is probably why crimes have migrated from the streets of cities to the virtual space, where attackers are trying to pick up the keys to our treasures. The physical loss of the phone is not as bad as the fact that someone will be able to access its contents.
In 2013, Samsung at the MWC in Barcelona said that threats in the digital world are coming to the fore, which means it is necessary to develop a secure platform that will resist them. The name for the platform was chosen correctly, this is the word Knox. It is consonant with Fort Knox, where the US gold reserve is kept, the place is considered one of the safest and most fortified. Samsung’s approach to a new area for itself did not come from an empty space, the company hired security engineers and created a solution from scratch that was focused on all types of threats, both existing and those that may arise in the future. …
Initially, Knox offered a separate space for your applications and data, part of the memory was encrypted with long crypto keys, and the programs and data located there were not visible from the outside. In fact, it turned out that Knox offered a smartphone in a smartphone, you had a second device, but it was virtual. It was possible to transfer any data from the smartphone’s memory to a protected area, create copies of applications with other accounts. This is how the second app suites came about. But the question – both then and now – is that in the case of Samsung smartphones, the copies of the apps in Knox are completely secure and encrypted.
Often people do not understand the difference in approaches, so I will try to give an analogy that will explain the differences. For example, you have money that you want to keep in the bank. You choose between different banks, one of them shows you the safe, explains how it is protected, and assures that no one can access it. During the entire existence of the bank, no one was able to break into the safe, although attempts were made repeatedly. In another bank, they show you ordinary lockers in the wall, they convince you that no additional means of protection are needed, after all, you are already in the bank’s premises, they have an excellent metal door, and there are cameras everywhere. They are trying to convince you that the likelihood of being hacked is negligible, around the world a billion people use similar banks and everything seems to be fine.
Да, все хорошо ровно до момента, пока во второй банк не вламываются грабители и не выносят ваши деньги. В этот момент оказывается, что все не так хорошо, как вам рассказывали, и ваш выбор оказался неверным. Но потеряв все, сложно кого-то в этом винить, у вас уже украли деньги.
Today, Knox is on the models of the middle and high price segments, since it is not only a software, but also a hardware function of Samsung smartphones. It is often impossible to implement Knox in budget models – insufficient performance, there is no separate processor responsible for the security of the device and OS. For ordinary users in smartphones, the “Knox Folder” is offered, for corporate clients – the Knox system, which has much greater administration capabilities.
But regardless of who you are, an individual or a business representative, the level of protection will be maximum. Samsung engineers at Knox implement data protection systems that stay ahead of threats in the real world. For example, starting with the Galaxy Note20 and Galaxy S20 smartphones have appeared protection from external physical influences. A separate processor, which is used to store biometrics, your data, and memory encryption, has now learned to recognize not only changes in device components, which was the norm before. This processor was taught to detect electromagnetic interference, temperature fluctuations, the use of a laser – all those methods by which attackers can try to read information from a device. In ordinary life, such an impact on the device is completely excluded, these are attacks that are carried out in laboratories, and the attackers have a high level of both knowledge and technologies used. We can say that it is often this or that state, since a limited number of “private traders” can boast of access to such hacking technologies.
В данный момент доказанных и работающих технологий взлома такого уровня не существует, это теоретическая возможность. Но даже наличие такой возможности стало толчком к тому, чтобы защитить устройства от подобных атак. Например, в Knox при попытке считать информацию извне стирается вся память, взломщик не получит ровным счетом ничего, а только разрушит данные. Такой в чем-то параноидальный подход связан с тем, что смартфоны от Samsung используются в разных странах мира, в том числе правительственными чиновниками, правоохранительными органами, крупными корпорациями, которые хранят свои секреты.
Классно, что такая технология доступна не только бизнес-пользователям, когда компания закупает специальные смартфоны для своих сотрудников, а встроена в обычные серийные модели. То есть защита от взлома распространяется на все аппараты, где есть Knox. Во флагманах она максимального уровня, в моделях, что доступнее по стоимости, проще. Но простота вовсе не означает изъянов в защите данных, повторю, что ни одного доказанного случая взлома Knox с 2013 года не было. И это не потому, что систему не пытались взломать, причина в том, как она организована и насколько безопасна. Например, Gartner в 2019 году исследовал различные платформы на предмет возможности их взлома. Из 30 рассматриваемых категорий возможных атак для 27 из них Knox 3.2 был описан как имеющий максимальный уровень защиты.
Прелесть Knox Vault на семействе Galaxy S21, решения для корпораций и бизнес-пользователей, в том, что оно дает возможность гибкого администрирования устройств. Администратор может удаленно установить весь необходимый софт, применить политики безопасности, распределить приложения между защищенной и общей памятью. Равно как и найти устройство удаленно или стереть все данные на нем. Но в отличие от обычных смартфонов на Android, тут всегда есть дополнительный «сейф», в памяти Knox содержатся все данные, которые представляют особую ценность для вас.
Usually attacks are based on the fact that attackers break into the Android kernel, and only then modify the system code, gain access to data. In Knox, the system checks all the components, the kernel is protected in real time, it looks like this.
That is, before allowing changes to the system kernel, Knox checks how such a request complies with the security policy. But the most important thing is that with each attempt to attack devices, the administrator receives warnings and can see the emerging threats. A hacking attempt always leaves traces and does not go unnoticed, which allows you to start looking for attackers.
By far the weakest element of any system is the human being, since having physical access to the system, you can try to hack it. But Knox Vault has its own solutions for this, corporate users cannot create their own “bookmarks” for the device to transfer data somewhere to the side. Today it is a very advanced security system that combines both hardware protection and software modules. It is important to understand that this protection is implemented on serial models that you buy in stores, you do not need to look for any special versions of smartphones or tablets. You only need to find out if they have Knox in them or not.
For corporate clients, the use of Knox is the protection of all company data, the ability to protect themselves from hacking the corporate IT system, get rid of vulnerabilities related to end devices and how employees use them. This question is often left to chance, although statistics claim that it is the end-user devices that are becoming a tidbit for cybercriminals.
Современный смартфон должен обладать максимальным уровнем защиты от взлома, я полностью уверен в такой необходимости. Загляните в свое устройство, посмотрите, какое количество информации в нем содержится, оцените свои риски, если кто-то получит к памяти и программам полноценный доступ.
None of us believe in bad things, because nothing like this will ever happen to us, we are good people and we do not particularly risk anything. And statistics inexorably proves this, since a person can face hacking of his device once in a lifetime. But statistics do not tell what problems this one-time hack brings to a person’s life. Someone may lose their job, someone may lose money or become the object of extortion. It is foolish to ignore the default ability to increase the protection of your data, make yourself and your life a tough nut to crack for intruders. On the other hand, a personal example does not teach anyone anything, so the choice of whether to protect your data or not is everyone’s business. For me, this choice is obvious, my smartphone and tablet should have the highest level of protection that exists on the market.
Published – 31 March 2021
Share:
we are in social networks:
News:
31.03.2021/55/XNUMX Panasonic Toughbook FZ-XNUMX Rugged Laptop Certified for Astra Linux OS Compatibility
31.03.2021/175/XNUMX President Biden intends to spend $ XNUMX billion on electric transport
31.03.2021 Huawei представила отчёт за 2020 год
31.03.2021/XNUMX/XNUMX Samsung began preparations for April XNUMX
31.03.2021/13/5 Middle-class smartphone realme VXNUMX XNUMXG released in China
31.03.2021/XNUMX/XNUMX Mail.ru Group will introduce a new work format in the company
31.03.2021 TWS-наушники и умные часы доминировали в сегменте носимых устройств в четвёртом квартале
31.03.2021/14/XNUMX TCL Mobile will hold a big presentation of new products on April XNUMX
31.03.2021/XNUMX/XNUMX TP-Link smart gadgets can now be controlled by Marusya from Mail.Ru
31.03.2021/XNUMX/XNUMX Xiaomi announced a change in its logo and a change in the writing graphics
31.03.2021/14/2021 Xiaomi showed its premium laptops Mi Notebook Pro 15 2021 and Mi Notebook Pro XNUMX XNUMX
31.03.2021/5/XNUMX ZTE offers a gaming smartphone RedMagic XNUMXs at a special price and gifts for its purchase
31.03.2021/25/XNUMX TSMC will increase prices for its products by XNUMX% – an increase in prices for electronics is inevitable
31.03.2021/5/XNUMX MTS opened a XNUMXG Center in St. Petersburg
31.03.2021/3/XNUMX A new HTC smartphone – Wildfire EXNUMX arrives on the shelves of Russian stores
31.03.2021/XNUMX/XNUMX The first flexible smartphone of the Xiaomi brand is presented – Mi Mix Fold
30.03.2021 Видео на канале: Porsche Design Acer Book RS — 200 000 рублей! От хейтера слышу!
30.03.2021/6/10 Video on the channel: OVERVIEW | LG Tone Free (FN000) – the best headset under XNUMX rubles
30.03.2021 Видео на канале: ОБЗОР | LG XBOOM Go (PL7) — классная портативная колонка с цветомузыкой
30.03.2021/6/XNUMX Samsung has implemented support for Wi-Fi XNUMXE in new TV models
30.03.2021/6/XNUMX Kia Reveals the Specifications of its Future EVXNUMX Electric Crossover
30.03.2021/XNUMX/XNUMX Volkswagen launches car subscription services in Russia
30.03.2021 Стал известен дизайн обновленного внедорожника ŠKODA KODIAQ
30.03.2021/16/XNUMX HUAWEI MateBook D XNUMX laptops go on sale in the Russian market
30.03.2021/XNUMX/XNUMX Hyundai will stop production of its electric vehicles in April due to problems with chip supplies
Subscription
