A computer implemented method for virtualizing a presentation layer of a wireless communication device configured to communicate data over a public wireless network including communicating data securely with a private network over the public wireless network, the method comprising: defining a split proxy server for respective execution by a presentation appliance and the wireless communication device for configuring the presentation appliance and wireless communication device for secure communication therebetween and to enable the presentation appliance to communicate data securely with the private network over the public wireless network; defining a virtual file system for the presentation appliance for storing data to a store of the wireless communication device via the split proxy server, said file system providing a private data zone for securely storing data; defining an execution environment on the presentation appliance for restrictively executing applications, said environment configured to enable an application running in the execution environment to access data stored to the private data zone using the virtual file system and restrict the application running in the execution environment to only store data securely to the private data zone using the virtual file system; defining a plurality of applications for execution by the presentation appliance in the execution environment, at least one of the applications having a user interface to operate the wireless communication device from the presentation appliance to communicate data with the private network via the split proxy server; and executing the plurality of applications thereby to visualize a presentation layer of the wireless communication device on the presentation appliance for securely communicating data without storing the data to the presentation appliance. defining a split proxy server for respective execution by a presentation appliance and the wireless communication device for configuring the presentation appliance and wireless communication device for secure communication therebetween and to enable the presentation appliance to communicate data securely with the private network over the public wireless network; defining a virtual file system for the presentation appliance for storing data to a store of the wireless communication device via the split proxy server, said file system providing a private data zone for securely storing data; defining an execution environment on the presentation appliance for restrictively executing applications, said environment configured to enable an application running in the execution environment to access data stored to the private data zone using the virtual file system and restrict the application running in the execution environment to only store data securely to the private data zone using the virtual file system; defining a plurality of applications for execution by the presentation appliance in the execution environment, at least one of the applications having a user interface to operate the wireless communication device from the presentation appliance to communicate data with the private network via the split proxy server; and executing the plurality of applications thereby to visualize a presentation layer of the wireless communication device on the presentation appliance for securely communicating data without storing the data to the presentation appliance.