# Defense in depth: combating modern threats with Jamf

In this JNUC presentation, Adam Boynton, Senior Security Sales Manager at Jamf, walks us through an effective mobile security strategy with Jamf.

## The mobile threat landscape

Boynton sets the stage by describing the current mobile threat landscape at a time where many of us work remotely and/or away from a desk. He refers to current events that affect mobile security like the recent European Union Digital Markets Act that requires Apple to allow third-party app stores and stories about government officials affected by spyware.

He invokes the [Jamf Security 360 report](/content/resources/white-papers/security-360-annual-trends-report/index.html), which provides a detailed look into annual threat trends. In particular, he cites:

- Phishing attacks are 50% more successful on mobile devices
- 8% of organizations had a mobile device accessing a third-party app store
- 40% of mobile devices used for work operate with a known vulnerability
- 1% of devices have confirmed mobile malware

## Building an effective mobile security strategy

So what can we do to keep mobile devices safe, especially in a climate where [targeted threats are on the rise](/content/blog/threat-advisory-mobile-spyware-continues-to-evolve/index.html)?

Boynton breaks it down to four steps.

### Secure configuration management

He recommends leveraging built-in security features like:

- Secure app distribution and notarization
- Malware monitoring lockdown mode
- Rapid security response patch program

With [Jamf Trust](/content/blog/jamf-trust-data-protection/index.html), admins can build on these protections and notify the user when their device has an out-of-date operating system, for example. Boynton shows a demo of what this looks like on an iPhone. Jamf can alert users to vulnerabilities on their device and take appropriate action.

The [Jamf Security Cloud](https://learn.jamf.com/en-US/bundle/jamf-protect-documentation/page/Jamf_Security_Cloud_Capabilities_with_Jamf_Protect.html), a part of Jamf Protect, helps admins visualize and act upon vulnerabilities in their device fleet. With real-time CVE ratings, admins can prioritize security fixes based on their potential impact.

### Attack prevention

Next, Boynton discusses attack prevention, particularly:

- Preventing web-based threats like phishing, spam and cryptojacking.
- Blocking access to resources if malware is detected on a device
- Using automatic remediation workflows

He shows a demo of Jamf Trust notifying the end user that they clicked on a phishing link and that it was blocked. Jamf blocks known phishing sites by checking for them in a database; undiscovered sites are blocked with machine learning by looking at certain criteria. Jamf Trust removing work applications after malware is detected is shown as well.

### Secure access to data

Cloud and SaaS software is accessible everywhere — authentication into these tools matters for security. Boynton recommends [Zero Trust Network Access](/content/solutions/zero-trust-network-access/index.html) (ZTNA) per-app VPN to isolate this software from the internet as much as possible.

Jamf can also enforce data loss prevention rules, like restricting copy/paste to or from certain apps.

### Hunt new threats

Looking for new threats can be difficult — [Jamf Executive Threat Protection](/content/products/jamf-mobile-forensics/index.html) makes it easier. Admins can look for anomalies, suspicious behavior or known indicators of compromise to spot problems and act upon them.

## Complete mobile security with Jamf

Boynton provides a helpful analogy, comparing a mobile device to his well-defended house to illustrate how Jamf products work together to secure a device.

[Jamf Pro](/content/products/jamf-pro/index.html), like the brick walls, a gate and a solid front door, give a secure foundation.

[Jamf Protect](/content/products/jamf-protect/index.html), like locks, a guard dog and barbed wire, defend from attacks.

[Jamf Connect](/content/products/jamf-connect/index.html), like a video doorbell, helps you make sure you know the person trying to enter.

[Jamf Executive Threat Protection](/content/products/jamf-mobile-forensics/index.html), like an alarm system, lets you know when someone has infiltrated.

Tags:

- [Jamf Nation User Conference](/content/blog/category/jamf-nation-user-conference/index.html)