NIST SPECIAL PUBLICATION 1800-4

---

Mobile Device Security

Cloud and Hybrid Builds

---

Includes Executive Summary (A); Approach, Architecture, and Security Characteristics (B); and How-To Guides (C)

Joshua Franklin

Kevin Bowler

Christopher Brown

Spike E. Dog

Sallie Edwards

Neil McNab

Matthew Steele

This publication is available free of charge from: https://doi.org/10.6028/NIST.SP.1800-4

The original draft of this publication is available free of charge from: https://nccoe.nist.gov/projects/building-blocks/mobile-device-security

NIST SPECIAL PUBLICATION 1800-4

Mobile Device Security: Cloud and Hybrid Builds

Includes Executive Summary (A); Approach, Architecture, and Security Characteristics (B); and How-To Guides (C)

Joshua Franklin

National Institute of Standards and Technology

Information Technology Laboratory

Kevin Bowler

Christopher Brown

Spike E. Dog

Sallie Edwards

Neil McNab

Matthew Steele

The MITRE Corporation

McLean, VA

February 2019

U.S. Department of Commerce

Wilbur Ross, Secretary

National Institute of Standards and Technology

Walter G. Copan, Undersecretary of Commerce for Standards and Technology and Director

• Volume A
  • Executive Summary
    • Challenge
    • Solution
    • Benefits
    • Share Your Feedback
    • Technology Partners/Collaborators

• Volume B
  • 1. Summary
    • 1.1. The Challenge
    • 1.2. The Solution
    • 1.3. Benefits
  • 2. How to Use This Guide
    • 2.1. Typographic Conventions
  • 3. Approach
    • 3.1. Audience
    • 3.2. Scope
    • 3.3. Assumptions
    • 3.4. Risk Assessment
      • 3.4.1. Threats
      • 3.4.2. Vulnerabilities
      • 3.4.3. Risk
      • 3.4.4. Security Control Map
    • 3.5. Technologies
  • 4. Architecture
    • 4.1. Cloud Build: Architecture Description
      • 4.1.1. Cloud Architecture Benefits
      • 4.1.2. Cloud Build Security Characteristics
    • 4.2. Hybrid Build: Architecture Description
      • 4.2.1. Hybrid Architecture Benefits
      • 4.2.2. Hybrid Build Security Characteristics
    • 4.3. Security Characteristics and Capabilities
      • 4.3.1. Default Policies
  • 5. Outcome
    • 5.1. The User’s Experience
    • 5.2. The System Administrator’s Experience
  • 6. Security Characteristic Analysis
    • 6.1. Assumptions and Limitations
    • 6.2. Build Testing
    • 6.3. Scenarios and Findings
      • 6.3.1. Data Protection
      • 6.3.2. Data Isolation
      • 6.3.3. Device Integrity
      • 6.3.4. Monitoring
      • 6.3.5. Identity and Authorization
  • 7. Future Build Considerations

• Volume C
  • 1. Introduction
    • 1.1. Practice Guide Structure
    • 1.2. Build Overview
    • 1.3. Typographic Conventions
  • 2. How-To: Build a Cloud-Based Solution to Mobile Device Security
    • 2.1. Cloud Build Setup and Configuration
      • 2.1.1. Cloud Build Components
      • 2.1.2. Office 365 Setup
      • 2.1.3. Office 365 MDM Setup
  • 3. How-To: Build an On-Premises Solution for Mobile Device Security
    • 3.1. Hybrid Build Setup and Configuration
    • 3.2. Hybrid Detailed Architecture
      • 3.2.1. Hybrid Build Components
      • 3.2.2. Enterprise Network and Firewall
      • 3.2.3. Enterprise Software Components for Hybrid
      • 3.2.4. Cloud Services Instances
      • 3.2.5. Hybrid Integration
  • 4. How-To: Device Configuration
    • 4.1. Device Enrollment with Office 365
      • 4.1.1. iOS
      • 4.1.2. Android
      • 4.1.3. Windows Phone 8.1
      • 4.1.4. Email Setup
      • 4.1.5. Lookout MTP Enrollment