Slashdot Mirror
First Android Device Certified For DoD Personnel
aneroid writes "The Defense Information Systems Agency (DISA) has certified its first secure mobile device running Android 2.2 — the Dell Streak 5. It is certified for use in the Defense Department's secure but unclassified communications. 'Although the Streak 5 is no longer available commercially, Dell is supplying it to DOD because the military likes the form factor,' said John Marinho, director of Dell enterprise mobility solutions. It 'includes a set of Android application interfaces designed to enhance the security of the device. Besides being able to transmit secure unclassified messages, the device can have its data remotely wiped in the event of loss or theft.' The device also has the ability to lock down after multiple unsuccessful password entries and allows admins to remotely control the peripherals and security policy levels on the device. You may recall that President Obama got an NSA-certified phone-PDA to use instead of his BlackBerry. We also discussed a related article last year about the U.S. Army considering smartphones. So, how soon will we start seeing other smartphone vendors bid for secure-communications-devices contracts?"
Since when?
for a semi-complete list of smart phones that DISA is looking at, check here: http://iase.disa.mil/stigs/net_perimeter/wireless/smartphone.html (A simple google search takes you right there).
That being said, IT infrastructure needs to expand and accommodate smart phones, both in the commercial and military world. You can only say NO for so long before everyone starts hearing "640K should be enough for anybody".
For the same reason you care about securely transmitting your credit card info even though it isn't classified?
It's Android and it's a Dell product. That means it'll forever be stuck on 1.6 and all the new malware requires 2.3!
"I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)
My friend, meet Mr. OTP.
For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
Ob: Oxymoron comment
Non-secure, meaning: Do not leave sitting in your car with the records of 500,000 service personnel on it.
A feeling of having made the same mistake before: Deja Foobar
In regards to OP, they probably lock down install rights, the government's giving you a phone to borrower while in service, it's not your phone to do w/e with is the different.
Mobile: that's security through obscurity as a real world example for you!
Er, the summary itself said "running Android 2.2" - where did 1.6 come from?
For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
It's this new thing called a joke.
secure but unclassified
I thought the term was "sensitive but unclassified"...
I am going to bet they won't be installing pirated apps from Chinese third party markets. Stick to amazon and google and you will do just fine.
What about all that android malware everyone keeps talking about?
The device is probably locked down and the user can not install apps. These are highly specialized **work related** devices.
BlackBerry has had all of these security features since 2004/2005. Remote wipe, policy enforcement, encryption, etc. Why not use a product that was secure off the shelf? Was it not expensive enough???
"A plan fiendishly clever in its intricacies"- Homer Simpson
Er, the summary itself said "running Android 2.2" - where did 1.6 come from?
Probably the joke is: Dell was wrapping them up on the commercial market when the DoD procurement office called and said they'd like to buy 1.6 million of them. At which point the sales department head at Dell picked up his/her jaw and then called their plant in China and told them to keep making them.
A feeling of having made the same mistake before: Deja Foobar
Not everything useful is classified--especially when you get large amounts of easily categorized data.
For one, you could monitor a soldier's location using a tracker. Infect some statistically significant number of phones, and you have extremely useful logistical data.
This won't fix it, but at least they can make it less trivial to compromise.
One of the primary issues was that if the battery runs out of juice, a soldier can't swap it out for a fresh battery. They brought it up, and Apple basically said "we don't care." So they looked harder at Android.
Just a point of interest - one of the problems DoD has had for a long time (since early 1980s, from my own indirect experience) is that the time it takes to get through certification is generally longer than the modern device release cycles. Five to ten years is not uncommon. So for example, most of the chips used in most of the electronics in most of the DoD's planes, vehicles and tools have the capabilities and features of stuff that you gave to Goodwill five years ago. IIRC DoD funded some special fabs to continue making licensed copies of old chips, partly for security reasons but also because the original makers were not making those chips any more. And the same is true of entire units - radios based on 10 or 20 year old technology, for instance. I think it was in the early 1980s (as mentioned) that DoD started relaxing the requirements for the certification process, and allowing some makers to self-certify some of the stuff, just so DoD could use it before it was obsolete.
It's easier to be a result of the past, but more fun to be a cause of the future! http://www.spacefinancegroup.com/
This is actually a tablet, not a phone.
In at least a sense he/she's right - several Android makers do pay MS a license fee for every Android they ship. I don't recall if Dell is one of them.
It's easier to be a result of the past, but more fun to be a cause of the future! http://www.spacefinancegroup.com/
What I'd really like to know is when can we get something like this secure phone at Verizon?
Of course, then we would need a secure Market..
Everybody knows 3 people with my name.
The Streak 5 makes a perfectly good phone. Makes an awesome on dash gps as well.
All that DISA has issued is an "Interim Security Configuration Guide" (see: http://iase.disa.mil/stigs/net_perimeter/wireless/u_android_2.2_dell_iscg_v1r1_20111020.zip), which is for "limited deployment, pilots and demonstrations" (see: http://iase.disa.mil/stigs/net_perimeter/wireless/u_android_iscg_release_memo.pdf). An approved device would have a "Security Technical Implementation Guide" (see: http://iase.disa.mil/stigs/net_perimeter/wireless/smartphone.html), such as BlackBerry and Windows Mobile.
cetroyer
Redhat is accredited to run on classified networks, so I guess it will be easier to get Android in the door.
I am very small, utmostly microscopic.
My Streak was shipped from Dell with 2.2 (2.2.2, I believe). They upgraded some time back.
Thanks for the heads up. If I find one I'll be sure to not connect it to network untill I copy everything off the hd.
by TheSpoom (715771) Uncaring Linux user here. I have nothing to add to this but please continue. *munches popcorn*
Also very popular for users of XCSoar the excellent open source glide/nav program
> So, how soon will we start seeing other smartphone vendors bid for secure-communications-devices contracts?"
Was at the N.S.A. Trusted Computing Conference last month in Orlando. Saw at least one vendor with smart phones for secure use. I'm not going to dig out the paperwork to find names right now, but one company is offering secure and rugged phones. A lot of other interesting stuff there, as well -- multi-domain systems in the same box with full RF shielding between compartments, "cloud" printing for printing across domains, and a mess of other stuff.
Wouldn't the military be more interrested in something durable? Something like the Motorola Defy? Don't think most devices would like how a soldier would treat them (no offence. Mud/dust/water is not something you can always avoid).
Well, I might have a way, but it only works on a semi spherical planet in a vacuum.
A 5 year cycle for safety of flight issues and major weapons system is not uncommon. Handheld stuff like this is off the shelf tech (albeit old for this example). You'll find DoD folks using brand new Blackberries today as an example fo the other way.