Hacker News new | ask | show | jobs
by i336_ 3912 days ago
I had to Google MAM to clarify what it meant, and then I realized this was what I was wondering about the other day, puzzling over how BYOD isn't a massive security nightmare.

I must admit, I'm very fascinated with application management would actually be executed, from an academic / computer science angle.

I can also completely understand patenting from a business perspective, but I'm also curious as to what things have actually been (publicly) patented.

How is MAM different from MDM?

1 comments

MDM uses operating system level API's provided by the vendors (Apple, Google). These require the device to be enrolled with management software (Airwatch, Mobile Iron, etc.).

MAM vendors like Apperian use various other techniques to manage the applications and their data only. The device is completely irrelevant, because we only care about the app. We do this through clever use of API's and a technology called 'App Wrapping'. This takes the mobile app, decompiles it into machine code, and very carefully injects new security features directly into the decompiled app. This allows adding security features like data at rest, analytics, etc. without needing any OS level API's. https://www.apperian.com/mam-blog/app-wrapping-lets-get-tech...

Wow, thanks for the reply! :)

> decompiles it into machine code

...this was the part my eyes started getting big...

> very carefully injects new security features directly into the decompiled app

...and this was the part I had a small jawdrop moment. :P

> This allows adding security features like data at rest, analytics, etc.

_Wow_. I think I suddenly get the rationale behind patenting.

Hah.

* Reads link *

> Mobile app wrapping is able to provide the same level of security as device management and even takes it a level deeper by securing the app itself and inspecting that app to know what it is doing and if it contains any malware.

(Italics at the end mine)

After an admittedly short look around, I've concluded that you seem to be focusing entirely on enterprise-controlled system-/app lockdown.

To me, the technical accomplishments you've achieved to make this possible provides a massive opportunity just waiting to be fulfilled: a new, unique approach to mobile antivirus. It wouldn't be for everyone, but I can totally say that I'd use it, and a lot of technically-oriented "tinkerers" would probably love some of the introspection and analytics your system provides, in an antivirus context. :D

I suspect most of your existing tech could translate across really easily - and that the effort you make to make antivirus better will also translate across into even better lockdown heuristics.

Granted, I don't fully understand the platform, so I might've missed a point somewhere, but I still think this is pretty amazing tech. Thanks for the info! :D

Are you looking for a job? We are hiring now for solid engineers. seibeljames@gmail.com or jseibel@apperian.com. We are doing some very interesting tech for governments / corporations with high-security clearance needs. I can explain much more in depth if this interests you