关键词: 开放融合, 移动安全, 数据管控, 虚拟化, 操作系统

Abstract: The paper first introduces the new features of mobile office environment: boundaryless and uncontrollable. Then, several perspectives are proposed to evaluate current mobile security solutions, which include isolation strength, effectiveness of internal security mechanism, control granularity and usability. Current mobile security solutions are classified to 2 categories: BYOD and COPE. In the BYOD scenario, there are 4 types of solutions according to the virtualization technology: application sandbox, multiaccount, container, and virtual machine. In the COPE scenario, it is classified to 2 types by the operating system: general operating system and customized operating system. Finally, these 6 types of solutions are compared systematically. Among these solutions, application sandbox has the lowest isolation strength and the lowest security, but has the highest usability and could be deployed with low cost. COPEwith customized OS has the highest R&D cost,sacrifices some usability, but has the highest security performance.

Key words: open fusion, mobile security, data management, virtualization, operating system