Security Evaluation of the Windows Mobile Operating System

Abstract

Smartphones are rapidly replacing the traditional cellular phones because of its PC-like features which allow them to be used as web browsers, editors and media players. These devices run complete operating systems that allow installation of third party applications. As their usage grows, the need for securing the user data stored on these devices and the services that they provide becomes more and more vital. Mobile Operating Systems naturally become the target for security scrutiny as they are responsible for managing all the information and services. Our report analyzes the Windows Mobile 6.1 operating system and its security features. We have looked into the OS architecture, memory management, process management, file system, device drivers and communication service and network stack architecture. We have analyzed its security model and looked into some of the related research work regarding the operating system’s security. Moreover, penetration testing against the Windows Mobile 6.1 operating system has been performed to show the stability and robustness of the network stack in a hostile environment. At last, security issues are discussed in detail from an application’s perspective in order to show what type of (security) problems are faced by an application and what improvements are needed to counter those threats. In a whole, this report identifies the strengths and weaknesses of the Windows Mobile operating system. The aim of this report is to create awareness in this area and to encourage further research into mobile operating system security.