1. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NEW THREATS ON MOBILE ENVIRONMENT IN KOREA KYU-BEOM HWANG (hwangkb@ahnlab.com) AND DEOK-YOUNG JUNG (human@ahnlab.com)

2. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 2 AGENDA KOREAN MOBILE ENVIRONMENT TYPE OF PROBLEMS WHAT IS THE PROBLEM ? EXPECTED FORM OF ATTACK COUNTER MEASURES CONCLUSIONS

3. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 3 KOREAN MOBILE ENVIRONMENT USED AROUND 81%(39.4million) FOR SEPTEMBER 2005. SERVICED BY SK TELECOM, KT FREETEL, LG TELECOM POPULARIZE GAMES, MOVIE CLIPS ON THE MOBILE PHONE Number of mobile phone users

4. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 4 KOREAN MOBILE ENVIRONMENT MORE THAN JUST FOR TELEPHONE Digital Entertainment Digital Mobile Broadcasting Digital Mobile Broadcasting MP3 Player MP3 Player Movie Player Movie Player Digital CAMERA Digital CAMERA Mobile GAME Device ( 3D Support ) Mobile GAME Device ( 3D Support )PIM Contacts Contacts Calendar Calendar WAP Browsing / Web Browsing File Storage / Exchange And more… Satellite DMB (Digital Multimedia Broadcasting)

5. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 5 KOREAN MOBILE ENVIRONMENT SMS HAS BECOME MORE POPULAR THAN VOICE GETTING INFORMATION VIA MOBILE PHONE ;.e.g. CAR NAVIGATION SYSTEMS BUS TRACKING and etc. WITH PC TO EXCHANGE MASSIVE DATA MP3Games Movie Clips Pictures USING USB CABLE TO CONNECT PC Provide the modem driver for mobile phone Provide the software ;i.e. Exchange data Exchange data Edit phone numbers Edit phone numbers

6. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 6 CAUSES OF THE PROBLEM EBOOKMAKER QPST BITPIM PHONEMANAGER

7. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 7 CAUSES OF THE PROBLEMS TOOLS USED BY UNTHINKING USERS Many communities which share tools and information Causes error on the phone USING QPST, BITPIM TO EXCHANGE COMMERCIAL DATA WITHOUT PERMISSION To copy disallowed contents Commercial contents (e.g. games) Commercial contents (e.g. games) Movie clips Movie clips E-Books E-Books Any other files Any other files To analyze unauthorized data on mobile phones

8. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 8 CAUSES OF THE PROBLEMS ACCESSING FILES ON EFS Deleting system files ;i.e. The mobile phone could be out of service The mobile phone could be out of service Copying too many files Short of memory resulting in error Short of memory resulting in error REVEALED DOCUMENT ABOUT EXTERNAL INTERFACE OF MOBILE PHONE LEADING TO Unwanted, unnoticed dialing (i.e. International calls ) Sending junk messages ( by SMS ) Simulating user actions

9. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 9 WHAT IS THE PROBLEMS? COMPLEX FIRMWARE More functions High complexity Large size DOWNLOADING FIRMWARE Downloading the firmware via internet Problem can happen on the mobile phone By wrong firmware By wrong firmware By incomplete Downloads By incomplete Downloads DISCLOSED IMPORTANT INFORMATION SPC (System Programming Code) number ;i.e. The setting of a mobile phone can be changed The setting of a mobile phone can be changed ESN (Electronic Serial Number) Can clone phone Can clone phone

10. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 10 CLONED MOBILE PHONES Confiscating 4718 cloned mobile phones Between Jan and Aug in 2005

11. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 11 CLONED MOBILE PHONES Explosive increase of cloned mobile phone this year

12. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 12 CLONED MOBILE PHONES Article about illegal electronic payment by cloned phone using stolen ESN codes

13. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 13 CLONED MOBILE PHONES The Korean government intends to prevent cloning of phones by rewarding citizens

14. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 14 WHAT IS THE PROBLEMS? EASY ACCESS TO PHONE CLONNING

15. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 15 WHAT IS THE PROBLEMS? Tools for cloning phones

16. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 16 WHAT IS THE PROBLEMS? Tools for accessing system files

17. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 17 WHAT IS THE PROBLEMS? Tools for uploading contents

18. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 18 WHAT IS THE PROBLEMS? Information and tools are exposed to the Internet

19. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 19 EXPECTED TYPE OF ATTACKS CHANGING SERVICE SETTING INFORMATION DELETING, MODIFYING FILES ON EFS ;.i.e. UPLOADING UNWANTED CONTENTS ;.i.e. Obscene games, picture, movie clips Replacing contents Spam advertising UNNOTICED DIALING (.e.g. international calls ) UNNOTICED SENDING JUNK MESSAGES via SMS DELETING, DISCLOSING INFORMATION ;.e.g. Silent unnoticed retrieval of information to PC E.g.) the telephone number, Email, ESN E.g.) the telephone number, Email, ESN Silent unnoticed Changing of phones numbers

20. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 20 EXPECTED TYPE OF ATTACKS

21. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 21 EXPECTED TYPE OF ATTACKS

22. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 22 EXPECTED TYPE OF ATTACKS

23. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 23 EXPECTED TYPE OF ATTACKS

24. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 24 COUNTER MEASURES PROTECTING CONTENTS WITH DRM, but still; Attempts to use time limited MP3s Attempts to use commercial contents PREVENTION OF USING CLONED PHONE The new mobile phone with another authentication in addition to ESN and MIN But the mobile phones produced before Aug 2004 still have a problem PHONE MANUFACTURES Patching firmware to disallow tools in use Different ways to encrypt data for each manufacturer’s phone Repairing the phone only at service centers Additional tracking services of mobile phone connection to Service PIN Numbers

25. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 25 COUNTER MEASURES MALICIOUS ATTACKS The malicious code itself is hard to spread on CDMA environment The attack so far is possible, but it needs a lot of conditions The possibility can be higher if a user still miss behaviors MEASURES TO FIGHT THE EXPECTED PC MALICIOUS CODE Disabling dialing and sending SMS without user’s consent Disabling sending system files such as ESN through Serial port, USB MEASURES TO FIGHT THE EXPECTED MOBILE CODE Disabling unwanted payment on games without user’s consent

26. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. AHNLAB INC. NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLABNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB NLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC. AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB INC.AHNLAB AVAR2005 26 CONCLUSIONS MOBILE ENVIRONMENT IN KOREA IS RAPIDLY CHANGING The threats so far are partially under control, but it needs more development Threats will increase as there are more services TO GET RID OF CURRENT THREATS, MUST UPDATE FIRMWARE The damage could be extensive if the problems happens Mobiles connected to PCs realistically have low possibility of attacks It’s difficult to spread to around USERS, SERVICE PROVIDERS AND PHONE MANUFACTURES HAVE TO THINK TOGETHER ABOUT THREATS AND COUNT MEASURES