GDThreat.h File Reference

#import <Foundation/Foundation.h>

Classes
class	BBDThreat
	Interface for retrieving threat details for a specific BBDThreatType. More...

Enumerations
enum	BBDThreatLevel {   Critical = 0,   High = 1,   Medium = 2,   Low = 3,   Null = 4 }
	Enumeration to indicate the level of risk posed by a threat. More...
enum	BBDThreatType {   AppMalware = 0,   AppSideload = 1,   DeviceSecurity = 2,   DeviceSoftware = 3,   SafeBrowsing = 4,   SafeMessaging = 5,   GeoZone = 6,   Identity = 7,   ApplicationSecurity = 8,   UntrustedDeveloper = 9,   NetworkSecurity = 10,   WiFiSecurity = 11,   DeviceOffline = 12,   DLP = 13 }
	Constants for GDComplianceType. More...

Enumeration Type Documentation

BBDThreatLevel

enum BBDThreatLevel

The overall threat level is returned as part getOverallThreatLevel (BBDThreatStatus). To understand the risk for specific threat type use getRiskLevel (BBDThreat).

To determine if a specific threat type is being evaluated you can also use getDetectionEnabled (BBDThreat).

Enumerator
Critical	A critical threat has been detected which requires immediate action.
High	A high threat requires the user or administrator to take action.
Medium	A medium threat indicates moderate risk and can be interpreted as an advisory.
Low	There is no threat detected or the risk level is low.
Null	The threat level is unknown or not evaluated.

BBDThreatType

enum BBDThreatType

The enumeration for types of threats detected by the runtime.

Enumerator
AppMalware	Detect malicious applications or malware on an Android device. Detects malicious applications or malware on an Android device using models built with machine learning to analyze the app package. Requires BlackBerry Mobile Threat Defense (MTD) to be enabled.
AppSideload	Detect applications installed from an untrusted source on Android devices. Detect applications that the user has installed from untrusted source on Android devices. Sideloaded apps are installed manually rather than from an official app store. Applications not from an official app store pose a security risk. Requires BlackBerry Mobile Threat Defense (MTD) to be enabled.
DeviceSecurity	Detect when device level security is compromised. Device security encapsulates a range of checks to determine the security health of the users device. For example if the user has rooted or jailbroken the device, whether the disk is unencrypted, if the user has set a screen lock or if the device is running in developer mode.
DeviceSoftware	Detect when the device operating system or security patches do not meet recommended standards. Detect when the device operating system version or security patches met the recommended security requirements. Devices running old versions of software pose a security risk. Detect whether the device model and/or manufacturer being used is listed as a prohibited device. For example, there might be a known security vulnerability in the Android software which was customized by a specific manufacturer.
SafeBrowsing	Detect when network or browsing requests are made to malicious links. Detect when network or browsing requests are made to malicious links. Checks are performed use machine-learning capabilities and accumulated knowledge from threat intelligence feeds to provide an assessment of the safety of the URL. Use GD.SafeUrl::checkUrl to check specific URLs or IPs. Requires Mobile Threat Defense (MTD) to be enabled.
SafeMessaging	Detect when messages contain malicious content or links. ContentChecker.checkMessage interface detects when messages contain unsafe links. For example links to malicious websites, phishing attempts, malware, adware, and other web sources that pose a threat. Requires BlackBerry Mobile Threat Defense (MTD) to be enabled.
GeoZone	Determine a user’s security risk level based on their real-world context. Determine a user’s security risk level based on their real-world context. Utilizes events and location data and scores these against geozones set by an administrator. Requires BlackBerry Persona to be enabled.
Identity	Determine whether current application activity matches the behavior and identity of the authorized user. Determine a user’s security risk level based on behavior and usage analysis. Requires BlackBerry Persona to be enabled.
ApplicationSecurity	Detect when the application's integrity is at risk or the app requires updating. Detect when the application binary fails integrity or attestation checks. Indicate if the application is out of date and needs upgrading.
UntrustedDeveloper	Detect when applications from an untrusted developer are permitted to be installed on an iOS device. Detect when an end user has permitted applications from an untrusted developer to be installed on an iOS devices. To launch a sideloaded application a user must first indicate they trust the certificate associated with the application developer. If a developer has been trusted this threat will be detected, as apps not from an official app store pose a security risk. Requires BlackBerry "Mobile Threat Defense" to be enabled.
NetworkSecurity	Detect when networking is subject to man in the middle attack. Detect when the attached network is subject to a man in the middle attack and a rogue actor is attempting to compromise the connection.
WiFiSecurity	Detect if attached WiFi network is insecure. Detect if the attached Wi-Fi network is using a protocol whose encryption and authentication are not considered secure.
DeviceOffline	Detect when the device has been offline for an extended period of time. Detect when the device has been offline for an extended period of time. This poses a risk due to the runtime library being unable to obtain new threat rules and models from BlackBerry. Requires BlackBerry Spark AppSecure SDK.
DLP	Detect when data loss prevention is compromised. Detect when user actions, events or third party applications may cause loss of sensitive application data.