Is there an imminent crisis? Probably not. Are mobile viruses an area of concern? Absolutely. And it's not really just a wireless virus issue. It's more of a mobile-device virus concern.
As we've stated before, mobile-device functionality is converging from two directions. Traditional cell phones are getting smarter (whether the vendors call them smart-phones is largely irrelevant), with enhanced messaging, Internet access and Java processing capabilities. At the same time, PDAs are expanding beyond their personal-organizer roots and taking on a range of networked applications as well as voice.
The results? The underlying operating systems in mobile devices, whether cell phones running Java or PDAs doing Web browsing, are becoming more complex. With that complexity comes increased potential for virus infestation, along with other security vulnerabilities. Mobile devices are also gaining new options for data connectivity, including wireless synchronization, more powerful peer-to-peer connectivity and even the capability -- in the case of Pocket PC devices -- to mount network file systems. Enhanced network connectivity is a key facilitator of virus propagation. So, too, is removable storage. The addition of Compact Flash, SD Memory and other forms of expansion slots increases the ability to move viruses, as well as data, from external systems into a mobile device.
Microsoft's role in the mobile-device market adds an interesting twist, too. The software giant's operating systems have always been the primary target for virus developers. Why? First, the ubiquity of Microsoft's products makes them a natural target. Second, its long-standard strategy of providing easy-to-use development tools and full API documentation makes development for its platforms relatively easy -- even if your specialty is viruses. Third, Microsoft's track record on security-related quality control is legendary, and it will take more than lip service for the company to turn this around. Finally, Microsoft is an incredibly appealing target for disenchanted programmers. Virus developers have always had a certain anti-establishment bent, and in the computer industry, Microsoft is about as establishment as it gets.
How do industry execs view the mobile virus threat? George Samenuk, CEO of Network Associates, garnered some attention late last year with his assertion that "the next wave of attacks is not going to come from the PC, but from wireless viruses."
Maybe so, but thus far there aren't very many documented examples. Yes, there have been a few destructive Palm OS viruses, which spread through docked PCs. And yes, there have been some documented denial of service virus attacks launched through wireless service providers. But before you conclude Samenuk's dire predictions are simply a ploy to sell antivirus software, remember this: It hasn't been all that long since Windows viruses were a relative rarity, and experts who made similar predictions about that platform were written off as fear-mongers.
Bottom line: The threat of mobile viruses is real. And while we aren't trying to fan the flames, responsible IT professionals who engage in major mobility initiatives will recognize that developing an appropriate virus strategy is just one more piece in a fairly complex implementation puzzle.
If you're looking for the latest mobile and wireless technologies, trends, and know-how, be sure to sign up for our free, weekly newsletter: Network Computing Mobile Observer. And, be sure to check out Network Computing's Mobile Observer site, your best source for timely information on everything mobile and wireless.
Send your comments on this column to Dave Molta at dmolta@nwc.com.