Jansen, WayneKarygiannis, TomKorolev, VladGavrila, SerbanIorga, Michaela2018-12-182018-12-182003-05-30https://doi.org/10.6028/NIST.IR.6981http://hdl.handle.net/11603/12311The use of mobile handheld devices, such as Personal Digital Assistants (PDAs) and tablet computers, within the workplace is expanding rapidly. These devices are no longer viewed as coveted gadgets for early technology adopters, but instead have become indispensable tools that offer competitive business advantages for the mobile workforce. While providing productivity benefits, the ability of these devices to store and transmit corporate information through both wired and wireless networks poses potential risks to an organizations security. This paper describes a framework for managing user privileges on handheld devices. The approach is aimed at assisting enterprise security officers in administering and enforcing group and individual security policies for PDAs, and helping constrain users to comply automatically with their organizations security policy. Details of a proof-of-concept implementation of the framework are also provided.23 pagesen-USThis item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.Public Domain Mark 1.0This is a work of the United States Government. In accordance with 17 U.S.C. 105, no copyright protection is available for such works under U.S. Law.digital certificateshandheld devicespersonal digital assistant (PDA)security policytrust managementUMBC Ebiquity Research GroupText