Specifications

Attack Surface Analysis of BlackBerry Devices
Backdoor
HTTP Proxy
Telephony
The telephony API net.rim.blackberry.api.phone cannot be utilized by unsigned applications. Signed
applications can monitor existing and past call records (not audio content) and send DTMF tones on exist-
ing calls. Applications can register to be notified of the following events:
callAdded
callAnswered
callConferenceCallEstablished
callConnected
callDirectConnectConnected
callDirectConnectDisconnected
callDisconnected
callEndedByUser
callFailed
callHeld
callIncoming
callInitiated
callRemoved
callResumed
callWaiting
conferenceCallDisconnected
List compiled from RIM API documentation.
5
30
IT Policy "Allow External Connections" = False
Application Controls "External Domains" = [list of allowed domains]
or
"External Network Connections" = Not Permitted
Device Firewall Status = Enabled
Application Permissions Connections > Carrier Internet = Deny
Other Device Settings
IT Policy "Allow External Connections" = False
Application Controls "External Domains" = [list of allowed domains]
or
"External Network Connections" = Not Permitted
Device Firewall Status = Enabled
Application Permissions Connections > Carrier Internet = Deny
Other Device Settings