The Samsung Android 8 with Knox CONTAINER must be configured to: Disable Bixby Vision.

From Samsung Android OS 8 with Knox 3.x COPE Use Case Security Technical Implementation Guide

Associated with: CCI-000366

SV-95003r1_rule The Samsung Android 8 with Knox CONTAINER must be configured to: Disable Bixby Vision.

Vulnerability discussion

Bixby Vision's image and text recognition capabilities use cloud-based processing. This may leak sensitive DoD data.SFR ID: FMT_SMF_EXT.1.1 #47

Check content

Review Samsung Android 8 with Knox configuration settings to determine if the mobile device CONTAINER is configured to disable Bixby Vision. This validation procedure is performed on both the MDM Administration Console and the Samsung Android 8 with Knox device. On the MDM CONTAINER console, do the following: 1. Ask the MDM Administrator to display the "Application disable list" setting in the "Android Application" rule. 2. Verify the list contains all Bixby Vision-related packages. On the Samsung Android 8 with Knox device CONTAINER, do the following: 1. Open the Samsung Camera application. 2. Press the Bixby Vision "eye" icon. 3. Verify Bixby does not start. If the Samsung Android 8 with Knox device starts Bixby Vision when pressing the Bixby Vision "eye" icon, this is a finding.

Fix text

Configure the Samsung Android 8 with Knox CONTAINER to disable Bixby Vision. On the MDM CONTAINER console, add all packages associated with the Bixby Vision feature to the "Application disable list" setting in the "Android Applications" rule. Note: Refer to the Supplemental document for additional information.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.