Windows Phone 7

Researcher: Alex Plaskett
Date Started: Nov 10, 2011

The use of smart phones has become part of daily life for many of us. With everyone essentially carrying a computer in their pocket in the form of a smart phone there is a large amount of sensitive information being stored on a device with a high amount of connectivity. Windows Phone 7 is Microsoft’s offering to the smart phone market which is currently gaining in popularity. 

This research project focuses on the security of the Windows Phone 7 ecosystem with the initial focus being on the security of the underlying platform and applications that run on top of it. The aim of the project is to assess the security of Windows Phone 7 devices to determine the level of risk that is exposed by the use of these devices and to offer guidance on how it can be minimised or mitigated.


Publications

Windows Pwn 7 OEM - Owned Every Mobile?

Nov 10, 2011

Alex Plaskett presented at 44con, T2 and Blue Hat v11 about the Windows Phone 7 security model, vulnerabilities that have been identified and a demo of exploitation of the phone.


Blue Hat v11 Executive Briefings: Win Phone 7 OEM Fail

Nov 10, 2011

Alex Plaskett presented at the Blue Hat v11 executive briefings about the research performed on Windows Phone 7 security. This presentation included a high level overview of the research performed, vulnerability trends/problems and points for discussion on how to improve platform security going forward.