Главная
Study mode:
on
1
Introduction
2
iOS Mobile App Security (MAS) Elevator Pitch
3
Hacking and Jailbreaking ios Attacks and weaknesses are well documented
4
Recent iOS App Coding and OS Reported Vulnerabilities
5
Standard iOS Application Today
6
Research Idea: IMAS Secure Application Framework
7
iOS Security Architecture
8
IMAS App Security "trade-space" Comparison Mar 2014
9
IMAS - Security Controls Device Access
10
Github: project-imas.github.io 13 Controls
11
IMAS - Encrypted Core Data (ECD) em
12
Encrypted Core Data Additional iMAS Support
13
Multi-compiler Based on work out of UC Irvine by Michael Franz and Per Larsen . Produces different binaries each compile • Static analysis and ROP exploits must account for variations
14
System Monitor - Monitor all device processes and network calls at the kernel level - Filtering tools to find and react to developer defined system events -IMAS provides direct programmatic app integ…
15
Memory Security Allows encryption, wiping, and checksums of objects in memory - Provides function address space validation Application Start
16
File Shredding
17
IMAS Sentry Application Add to existing Apple deployed devices • Jailbreak and Debugger Detection
18
Prior Research Focus - modifying ELF structures
19
iOS Static App Attacks
20
Static App Attacks Process
21
Code Injection and Binary Patching
22
Consequences of Static Attacks
23
Encrypted Code Modules (ECM) WHAT?
24
IMAS Encrypted Code Modules (ECM) Summary
25
ECM - Encrypted Code Modules Concept 2/3
26
Build Summary
27
App Startup
28
Validating Integrity
29
ECM Advantages
Description:
Explore iOS app integrity and security measures in this OWASP AppSecUSA 2014 conference talk. Learn about vulnerabilities in iOS applications to static analysis and binary code patching, and discover open-source solutions like Encrypted Code Modules (ECM) to protect sensitive enterprise iOS apps. Gain insights into anti-tamper techniques that resist patching, and follow a step-by-step process to enhance the security and authenticity of iOS applications. Delve into topics such as jailbreak detection, debugger detection, and the iMAS (iOS Mobile Application Security) research project. Understand the iOS security architecture, various security controls, and advanced concepts like multi-compiler techniques and memory security. Examine the process of static app attacks, code injection, and binary patching, along with their consequences. Acquire knowledge about implementing and validating ECM to significantly improve iOS app integrity.

iOS App Integrity: Enhancing Security with Encrypted Code Modules

OWASP Foundation
Add to list
#Programming #Mobile Development #iOS Development #iOS Security #Software Development #Software Testing #Static Analysis #Information Security (InfoSec) #Cybersecurity #Application Security #Code Injection #Mobile Application Security
0:00 / 0:00
1 of 29

Introduction