Lookout’s CTO Kevin Mahaffey explained that like PCs, smartphones are very sophisticated computers. They run operating systems, often the same or similar to the OS on a PC, and they also run sophisticated software. With complicated software comes bugs and like the PC, smartphones can have exploits. These are basically flaws in the software that allow hackers to attack the phone. Rogue software, malware and spyware can be installed on smartphones, similar to what happens with PCs. As phones become “smarter” than ever and people do more with them, it’s important to make security a priority. But security is an abstract concept and doesn’t mean much to people.

“Security in your smartphone is not just protecting against malware,” explained Mahaffey. “It’s also protecting your private data and protecting the very expensive piece of equipment in your pocket. Many people don’t understand security and wonder why they should care about security. In my mind there are three things that most people care about and these are all related to security. One is protecting the integrity of their device. People want their system to be safe so they can do banking and shopping and communicating with people, without fear of leaking their private data somewhere. The second thing is protecting the data on the device. This can be from a privacy standpoint or if you lose your phone, someone else being able to retrieve all the data, such as photographs, that are stored on the device. Last is protecting the physical device itself. Smartphones are expensive and cost a lot of money to replace. People are forgetful and can leave the device most anywhere.”

To help smartphone users protect their data and devices, Mahaffey offered a few tips. First, set a strong smartphone password. If the phone is lost, at least the data will still be private. Always download the available software updates for your phone, particularly for the operating system. These usually include patches to security flaws recently found in the software. Install a security app to protect against malicious code. Lookout Mobile Security offers an “essential version” of its software for Android, BlackBerry and Windows Mobile devices. Download it free through www.mylookout.com.

Once your software is up to date and there’s a security app installed, the next thing to consider are the sites you use for sourcing apps. Only download apps from trusted sites and after an app is installed, pay attention to the private data it’s accessing.  When you install an app, take the time to read the data and personal information that it needs to access. Whether it is accessing your location, your personal information or text messages, it should make sense that the application needs access to those capabilities. One of the best apps to install is one that lets you find your phone. Make sure it allows you to remotely lock your phone if it’s lost or stolen. You can also enable a Wipe feature on your phone. A Wipe app will clear all the data so your private information won’t fall into the wrong hands. The best Wipe apps will wipe the SD card too.

Not all connectivity is equally secure. On Public WiFi, limit email and social networking. Mahaffey advised that many websites, email programs, instant messaging programs and social networking sites are not entirely safe to browse or access from a public WiFi network. Don’t use banking or credit cards on a public network, and on any network remember that the address or URL of secure financial sites always begins with “https.”

Finally, beware of smishing. SMS texting combined with online phishing results in smishing. Don’t click on links in text messages or emails if you don’t know the sender or they look suspicious. When you’re asked to enter sensitive information via your smartphone —think twice and trust your instincts. Scammers are everywhere.