Practical Attacks against Virtual Desktop Infrastructure (VDI) Solutions

The Virtual Desktop Infrastructure (VDI) technology is considered one such practical solution. Since VDI provides a remote workstation offering so that no data is stored locally on an endpoint device, it is touted as the security solution against data theft. While such a solution comes in handy when a mobile device is stolen, how does VDI scale when the device itself is compromised by a threat actor? With mobile devices acting as a penetration vehicle into the enterprise and its resources, and threat actors progressively threatening this platform, such a question must be raised. In fact, as this paper shows, device compromise is a real and practical threat that enterprises must take into consideration.