First Android Device Certified For DoD Personnel 79
aneroid writes "The Defense Information Systems Agency (DISA) has certified its first secure mobile device running Android 2.2 — the Dell Streak 5. It is certified for use in the Defense Department's secure but unclassified communications. 'Although the Streak 5 is no longer available commercially, Dell is supplying it to DOD because the military likes the form factor,' said John Marinho, director of Dell enterprise mobility solutions. It 'includes a set of Android application interfaces designed to enhance the security of the device. Besides being able to transmit secure unclassified messages, the device can have its data remotely wiped in the event of loss or theft.' The device also has the ability to lock down after multiple unsuccessful password entries and allows admins to remotely control the peripherals and security policy levels on the device. You may recall that President Obama got an NSA-certified phone-PDA to use instead of his BlackBerry. We also discussed a related article last year about the U.S. Army considering smartphones. So, how soon will we start seeing other smartphone vendors bid for secure-communications-devices contracts?"
Re: (Score:1)
For the same reason you care about securely transmitting your credit card info even though it isn't classified?
Locations for one (Score:1)
Not everything useful is classified--especially when you get large amounts of easily categorized data.
For one, you could monitor a soldier's location using a tracker. Infect some statistically significant number of phones, and you have extremely useful logistical data.
This won't fix it, but at least they can make it less trivial to compromise.
Re: (Score:2)
My friend, meet Mr. OTP [wikimedia.org].
Obama's no longer using his Blackberry? (Score:2)
Re: (Score:1)
You forgot about the "It is certified for use in the Defense Department's secure but unclassified communications." part of the summary, didn't you?
Here, I'll highlight the important part, since you seem deficient in sentence parsing.
Re: (Score:3, Informative)
Re: (Score:2)
The Sectera Edge [gdc4s.com] is certified for classified communications... in fact, it's the only "smartphone" that is certified for Top Secret comms. That fact is half of what they're trying to get around here.
The good news is that the US government takes information assurance really, really seriously. The bad news is that they take it seriously enough that the only mobile device you can read your Top Secret e-mail on is a government-only, multi-thousand dollar Windows PDA that's many years behind the times because it
Re: (Score:1)
Re: (Score:1)
Check the date on that picture... it's almost 3 years old.
Re: (Score:2)
It's Android and it's a Dell product. That means it'll forever be stuck on 1.6 and all the new malware requires 2.3!
Re: (Score:1)
In regards to OP, they probably lock down install rights, the government's giving you a phone to borrower while in service, it's not your phone to do w/e with is the different.
Mobile: that's security through obscurity as a real world example for you!
Re: (Score:2)
Er, the summary itself said "running Android 2.2" - where did 1.6 come from?
Re: (Score:2)
It's this new thing called a joke.
Re: (Score:2)
Er, the summary itself said "running Android 2.2" - where did 1.6 come from?
Probably the joke is: Dell was wrapping them up on the commercial market when the DoD procurement office called and said they'd like to buy 1.6 million of them. At which point the sales department head at Dell picked up his/her jaw and then called their plant in China and told them to keep making them.
Re: (Score:2)
Just a point of interest - one of the problems DoD has had for a long time (since early 1980s, from my own indirect experience) is that the time it takes to get through certification is generally longer than the modern device release cycles. Five to ten years is not uncommon. So for example, most of the chips used in most of the electronics in most of the DoD's planes, vehicles and tools have the capabilities and features of stuff that you gave to Goodwill five years ago. IIRC DoD funded some special fab
Re: (Score:1)
Re: (Score:1)
My Streak was shipped from Dell with 2.2 (2.2.2, I believe). They upgraded some time back.
Re: (Score:2)
I am going to bet they won't be installing pirated apps from Chinese third party markets. Stick to amazon and google and you will do just fine.
Locked down, no installing apps (Score:2)
What about all that android malware everyone keeps talking about?
The device is probably locked down and the user can not install apps. These are highly specialized **work related** devices.
All kinds of smart phones (Score:4, Insightful)
That being said, IT infrastructure needs to expand and accommodate smart phones, both in the commercial and military world. You can only say NO for so long before everyone starts hearing "640K should be enough for anybody".
Re: (Score:3)
for a semi-complete list of smart phones that DISA is looking at, check here: http://iase.disa.mil/stigs/net_perimeter/wireless/smartphone.html [disa.mil] (A simple google search takes you right there).
Interesting that their iPhone and iPad risk assessment document comes up as "access denied"... Maybe I need one of those Dell Streak thingys to see it?
Re: (Score:2)
That looks more like a webmaster oops than a "DENIED" message . Even so, I doubt the iPhone assessment would be very interesting. I mean, seriously, I cannot picture the prospect of involving iTunes making anybody's eyes light up.
Re: (Score:2)
That looks more like a webmaster oops than a "DENIED" message . Even so, I doubt the iPhone assessment would be very interesting. I mean, seriously, I cannot picture the prospect of involving iTunes making anybody's eyes light up.
Apples, certainly. Have a few DOD iTunes account would be just swell.....
Re: (Score:2)
Actually, it's just bad security setup on that server. See the pki for Blackberry - same thing.
Smart Phone - Military (Score:2)
Ob: Oxymoron comment
Non-secure, meaning: Do not leave sitting in your car with the records of 500,000 service personnel on it.
Re: (Score:3)
Ob: Oxymoron comment
Non-secure, meaning: Do not leave sitting in your car with the records of 500,000 service personnel on it.
Clearly the Military wouldn't pay for a redundant device that allows them to lose 500,000 private records (get it, omg military puns) at a time, when the DAT tapes they have now work just fine...
secure but unclassified - correct term? (Score:1)
secure but unclassified
I thought the term was "sensitive but unclassified"...
Re: (Score:2)
Re: (Score:2)
(My $0.02 as the summarizer)
I understood it as: ...and... Classified --> Document/Content sensitivity+visibility
Secure --> Network
So they're referring to both - secure network yes but no using it to get your covert mission orders via video conf on the device, for example. They probably still expect their personnel to use previously established procedures/devices. Could be a bit of a grey area though.
battery (Score:2)
One of the primary issues was that if the battery runs out of juice, a soldier can't swap it out for a fresh battery. They brought it up, and Apple basically said "we don't care." So they looked harder at Android.
Re: (Score:1)
Re: (Score:1)
Re: (Score:2)
Also very popular for users of XCSoar the excellent open source glide/nav program
Why not Blackberry instead/also? (Score:3)
BlackBerry has had all of these security features since 2004/2005. Remote wipe, policy enforcement, encryption, etc. Why not use a product that was secure off the shelf? Was it not expensive enough???
Re: (Score:3)
Because it's not secure enough unless they can put a "DoD home grown and raised" sticker on it.
Re:Why not Blackberry instead/also? (Score:5, Funny)
"CNN - Due to a glitch in Research In Motion's infrastructure, all combat operations for this week have ceased. Now to our correspondent in the field . . . what's going on down there on the field, Nic?"
"Well, both sides have laid down their arms, and are gaming with each other instead . . . not much to report here . . . you got some old Lindsay Lohan footage to show instead . . . ?"
Re: (Score:2)
Re: (Score:2)
Same reason we don't all use blackberries - some users or groups at DoD wanted other capabilities or just like Android or something, and they asked DISA to find or get something that was or could be certified.
Re: (Score:2)
Well those that run their won BES systems are not supposed to be taken down by things like this but the outage seemed to get them as well.
Re: (Score:2)
Probably because most of what makes a Blackberry a Blackberry requires going through RIM's servers.
Re: (Score:2)
Different crypto needs for different areas and legal needs.
Re: (Score:2)
Re: (Score:2)
Probably too dependent on RIM for the server. If RIM goes out of business and the BlackBerry was the standard then the DOD might have to spend even more keeping them alive and using outdated equipment.
And no I am not suggesting that they would have to go us RIMs servers but they would depend on RIM for BES support, updates and installs.
Re: (Score:2)
I wonder if Dell has to pay for a Windows license (Score:1)
Wasn't it a while back that Dell paid Microsoft for a Windows license on all computers even if it didn't ship with Windows?
Re: (Score:2)
In at least a sense he/she's right - several Android makers do pay MS a license fee for every Android they ship. I don't recall if Dell is one of them.
What U'd Really Like to Know (Score:2)
What I'd really like to know is when can we get something like this secure phone at Verizon?
Of course, then we would need a secure Market..
Re: (Score:2)
What I'd really like to know is when can we get something like this secure phone at Verizon?
Of course, then we would need a secure Market..
Why do you want a secure phone? What are you hiding, citizen?
Re: (Score:2)
You can already get a secure phone at Verizon. It's called the "Blackberry 9930".
Re: (Score:2)
The Streak is not a phone.
Re: (Score:2)
That's strange. I use my Streak 5 to make voice calls all the time and have since the moment I pulled it out of the box.
The Streak 7, although still an Android device, makes you work harder to unlock the phone capabilities.
Re: (Score:2)
That's strange. I use my Streak 5 to make voice calls all the time and have since the moment I pulled it out of the box.
The Streak 7, although still an Android device, makes you work harder to unlock the phone capabilities.
Using a tablet to make phone calls may be technically possible, but it still makes you look like a twat.
First Android Device NOT Certified For DoD (Score:1)
All that DISA has issued is an "Interim Security Configuration Guide" (see: http://iase.disa.mil/stigs/net_perimeter/wireless/u_android_2.2_dell_iscg_v1r1_20111020.zip [disa.mil]), which is for "limited deployment, pilots and demonstrations" (see: http://iase.disa.mil/stigs/net_perimeter/wireless/u_android_iscg_release_memo.pdf [disa.mil]). An approved device would have a "Security Technical Implementation Guide" (see: http://iase.disa.mil/stigs/net_pe [disa.mil]
Linux DOD Accreditation (Score:2)
Redhat is accredited to run on classified networks, so I guess it will be easier to get Android in the door.
Re: (Score:2)
Except that Android is radically different than Red Hat? Sure they share a kernel base to some degree, but that's about it.
Re: (Score:2)
The Android "fork" holds a task scheduler that is quite peculiar, and tho i have not payed attention as of late i think their attempts at having it pulled into the main source was resisted because of how extensive it was.
Remotely wiping (Score:2)
Thanks for the heads up. If I find one I'll be sure to not connect it to network untill I copy everything off the hd.
Already happening... (Score:2)
> So, how soon will we start seeing other smartphone vendors bid for secure-communications-devices contracts?"
Was at the N.S.A. Trusted Computing Conference last month in Orlando. Saw at least one vendor with smart phones for secure use. I'm not going to dig out the paperwork to find names right now, but one company is offering secure and rugged phones. A lot of other interesting stuff there, as well -- multi-domain systems in the same box with full RF shielding between compartments, "cloud" printing
Motorola Defy (Score:2)
Re: (Score:2)
Re: (Score:2)
http://www.otterbox.com/Dell-Streak-Defender-Series-Case/DEL2-STRK1,default,pd.html?dwvar_DEL2-STRK1_color=20&start=1&cgid=dell-streak-cases [otterbox.com]