SecurityTube

iOS Security Expert

Online Training: h6p://www.Securitytube-Training.com

SecurityTube.net

Introduc?on to iOS
Vivek Ramachandran
Founder, SecurityTube.net
Training: h6p://securitytube-training.com

SecurityTube.net

Course Requirements
Hardware
Jailbroken iPhone / iPad
Any version of iOS >= 5.1.1
No Support for Jailbreaking (warranty void?)
h6p://jailbreak-me.info/

SoWware
Windows / Linux / OS X
SecurityTube.net

Can I follow the course without a device?

Absolutely!
Will not be able to do the demos
Concept Oriented and Prac?cal
will not be boring to watch J

SecurityTube.net

iOS
iPhone

iOS Opera?ng System

iPad

iPod

SecurityTube.net

What is iOS really?

h6p://en.wikipedia.org/wiki/IOS

SecurityTube.net

Is iOS Open Source?

h6p://opensource.apple.com/
SecurityTube.net

Only Selected Components

h6p://opensource.apple.com/release/ios-601/
SecurityTube.net

Does it look any dierent than Linux?

Lets login to an Jailbroken iPhone

SecurityTube.net

SecurityTube iOS Security Expert

Online Training: h6p://www.Securitytube-Training.com

SecurityTube.net

iOS Applica?on Basics

Vivek Ramachandran
Founder, SecurityTube.net
Training: h6p://securitytube-training.com

SecurityTube.net

iXXX

Applica?ons

Opera?ng System (iOS)

Hardware

SecurityTube.net

iOS Applica?ons

SecurityTube.net

How does one Develop iOS Applica?ons?

Xcode using Objec?ve-C

iPhone / iPad simulator

Run on actual device to test

SecurityTube.net

HelloWorld
Customary Hello World Program

SecurityTube.net

SecurityTube iOS Security Expert

Online Training: h6p://www.Securitytube-Training.com

SecurityTube.net

MVC and Event Driven

Architecture
Vivek Ramachandran
Founder, SecurityTube.net
Training: h6p://securitytube-training.com

SecurityTube.net

SecurityTube iOS Security Expert

SecurityTube.net

ARM Processor

SecurityTube.net

iDevice Processors
SoC System on a Chip
iDevices
License ARM cores (< iPhone 5)
License ARM instruc?on set to build own code (>
iPhone 5)

h6p://www.anandtech.com/show/6292/
iphone-5-a6-not-a15-custom-core
SecurityTube.net

ARM anyone?

h6p://en.wikipedia.org/wiki/ARM_architecture

SecurityTube.net

Demo
A6aching to a Running Program
View disassembly

SecurityTube.net

SecurityTube iOS Security Expert

Online Training: h6p://www.Securitytube-Training.com

SecurityTube.net

iOS Security Mechanisms

Pre6y much shrouded in mystery
First public disclosure:
h6p://images.apple.com/ipad/business/docs/
iOS_Security_May12.pdf
Talk at Blackhat 2012
Rehash of the PDF above
SecurityTube.net

Security Architecture

SecurityTube.net

Source: Apple Inc.

Secure Boot Chain

Boot ROM

LLB

iBoot

iOS Kernel

SecurityTube.net

Loading Trusted Applica?ons

Code Signing

iOS Kernel

iOS Applica?on

SecurityTube.net

Applica?on Isola?on
Code Signing

Code Signing

Applica?on 1

Applica?on 2

Sandbox

Sandbox
SecurityTube.net

Data Encryp?on
Hardware Crypto
UID and GID keys

Data and File Protec?on

Keychain
Keybags
File Encryp?on

SecurityTube.net

Network Security
Built in support for:
SSL and TLS
VPN
Wi
Enterprise (EAP-TLS, TTLS, PEAP etc.)

Bluetooth

SecurityTube.net

Why is this relevant to Applica?on

Pentes?ng?
How can you audit an applica?on if the plakorm
has so many restric?ons?
How do you gain access to the lesystem?
How do decrypt data from keychain, le etc.?
How do you monitor the applica?on while it is
running?
SecurityTube.net