Smudge attack as an information security threat

Article by: Sudhir GK, CEO and Information Security Consultant, Inzinc Consulting India

Smudge Attack on Smartphones and other devices

Hackers always find new techniques to attack devices and applications. One such novel technique is the "Smudge attack". Smudge attack is a big information security threat particularly for smartphones, tablets and any touch screen devices. So, what is this Smudge attack all about? Let us learn.

A smudge attack is a method to pull out the password pattern of a touch screen device such as a smart phone or tablet computer. The method was investigated by a team of University of Pennsylvania researchers. Studies have shown that 68% of the touch screen patterns can be retrieved successfully.

So, how does a hacker pull out the touch screen pattern on devices? 

While using our smartphones, all of us leave traces of our finger prints on the devices which are epidermal oils. These oils if not cleaned will remain on the touch screen devices. These oily residues are called "smudge". Hackers can use this smudge to track the touch screen patterns and finally may be successful in entering your touch screen device and probably even applications. 

How to prevent smudge attacks on touch screen devices?

There are many ways in which smudge attack can be prevented in touch screen devices. One of the effective methods is to use complex patterns so that it becomes very difficult for the hackers to read the smudge and capture the patterns.

Contact us for ISO 27001 Consulting requirements 

Read More

What is Benchmarking?

Benchmarking is a technique of identifying, comparing and adapting the best business procedures and best practices from different Organizations who are successful in following such practices. If best practices are yielding business growth and prosperity in other Organizations, there should be no reason to adapt these practices in our own Organization.

However, it is to be noted that Benchmarking is not exactly "copying" other Organizational procedures, but to fit in the business model and philosophy into our own business taking into consideration our Organizational culture. 

What is the necessity of Benchmarking?

Benchmarking becomes necessary in Organizations for the following reasons:

• Pressure to lower prices of your product which is Customer and market driven
• Cut-throat competition in today's businesses when every competitor wants to keep its nose ahead of other similar product or service companies
• Pressure to shorten the lead time to supply to the Customers 
• Lower Organizational growth and performance as may be found from self assessments or management system audits
• Lower Technology compared to similar such Organizations can also lead to Organizations seriously think on "benchmarking" best technologies and technological practices

Benchmarking Process:

The steps involved in Benchmarking are as below:

1. Identify what needs to be benchmarked. For example, its it cost, delivery time, quality practice, technology, etc.
2. Once the benchmark metric is identified, then research Organizations who are successful in achieving this measure or metric. Also research the best practices followed by those Organizations
3. Learn about the best practices and train internally
4. Plan the implementation of best practices
5. Implement and monitor the best practices
6. Measure post implementation metric and improve

Read More

What is Quality Circle?

A good collaborative technique of solving work related issues is that of a Quality Circle. A quality circle is a group of employees performing similar work, and who voluntarily meet on a regular basis to find out, analyze and resolve problems related to work. Usually, six to ten people with cross-functional representation form a Quality Circle.

A Brief History of Quality Circles

After the World War II ended in the year 1945, the economy of Japan was devastated and its then Government took a vow to rebuild Japan's economy and state. In this rebuilding process, they called upon two Great personalities called W. Edwards Deming and Joseph Juran to give lectures on how to build economy with "Quality" as a strategy.

It was during these lectures in the 1950s, the concept of Quality Circles originated. Later, this concept was spread across Japan by mainly Dr. Kaoru Ishikawa, a Japanese Professor at the University of Tokyo.

Key features of the Quality Circles

1. Quality Circles aim to prevent work related problems
2. Quality Circles are voluntary in nature
3. Quality Circles are based on human building and interaction
4. Quality Circles puts emphasis on participation
5. Quality Circles need Top Management support
6. Quality Circles are aimed at realizing improvements in Organization
7. Quality Circles aims for better work environment and job satisfaction
8. Quality Circles provide solutions to Organizational problems

Quality Circles Structure

The structure of the Quality Circles consists of

• Members who are trained in problem solving and who identify and help solve problems
• Leaders who lead a Quality circle to meeting its objectives
• Facilitators who organize meetings and co-ordinate between Quality circles and the other Organizational personnel including Management

Read More

Quality Definition | Quality Meaning | Quality Management

Quality definitions by Management Gurus

Proper understanding of the meaning of the word "Quality" is to be understand by all relevant interested parties in an Organization. This will enable the holistic understanding and application of it in an Organization. Instead of thinking that the Quality word applies to a function or a department in an Organization, the definitions given by Management Gurus will influence all Stakeholders of the Organization to view Quality from the perspectives of Customer, professional work discipline, etc.

Quality definition by Dr. W. Edwards Deming:

Quality Guru and famous American Statistician Dr. W.Edwards Deming defines Quality as "Quality is defined by the satisfaction of the Customers"

Quality definition by Dr. Joseph Juran:

Quality Guru Dr. Joseph Juran defines Quality as "Quality is fitness for use"

Quality definition by Peter Drucker:

Management Guru Peter Drucker defines Quality as "Quality in a service or product is not what you put into it. It is what the Customer gets from it"

Quality definition by Aristotle:

Ancient Greek Philosopher Aristotle defines Quality as "Quality is not an act. It is a habit"

Quality definition by Philip Crosby:

Quality Guru Philip Crosby defines Quality as "Quality is free"

Read More