Samsung Android 8 with Knox must be configured to: Disable Bixby Vision.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-80187	KNOX-08-003500	SV-94891r1_rule		Low

Description
Bixby Vision's image and text recognition capabilities use cloud-based processing. This may leak sensitive DoD data. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Samsung Android OS 8 with Knox 3.x COBO Use Case Security Technical Implementation Guide	2018-11-30

Details

Check Text ( C-79859r1_chk )
Review Samsung Android 8 with Knox configuration settings to determine if the mobile device is configured to disable Bixby Vision. This validation procedure is performed on both the MDM Administration Console and the Samsung Android 8 with Knox device. On the MDM console, do the following: 1. Ask the MDM Administrator to display the "Application disable list" setting in the "Android Application" rule. 2. Verify the list contains all Bixby Vision-related packages. On the Samsung Android 8 with Knox device, do the following: 1. Open the Samsung Camera application. 2. Press the Bixby Vision "eye" icon. 3. Verify Bixby does not start. If the Samsung Android 8 with Knox device starts Bixby Vision when pressing the Bixby Vision "eye" icon, this is a finding.

Check Text ( C-79859r1_chk )

Review Samsung Android 8 with Knox configuration settings to determine if the mobile device is configured to disable Bixby Vision.

This validation procedure is performed on both the MDM Administration Console and the Samsung Android 8 with Knox device.

On the MDM console, do the following:
1. Ask the MDM Administrator to display the "Application disable list" setting in the "Android Application" rule.
2. Verify the list contains all Bixby Vision-related packages.

On the Samsung Android 8 with Knox device, do the following:
1. Open the Samsung Camera application.
2. Press the Bixby Vision "eye" icon.
3. Verify Bixby does not start.

If the Samsung Android 8 with Knox device starts Bixby Vision when pressing the Bixby Vision "eye" icon, this is a finding.

Fix Text (F-86993r1_fix)
Configure Samsung Android 8 with Knox to disable Bixby Vision. On the MDM console, add all packages associated with the Bixby Vision feature to the "Application disable list" setting in the "Android Applications" rule. Note: Refer to the Supplemental document for additional information.