iOS Application Defense - iMAS
summary
Claims an open source iOS framework that pushes security beyond Apple with five security controls available for developers, concrete tools like encrypted core data (SQLCipher), OpenSSL/FIPS bindings, jailbreak and debugger detection, memory-hard storage and forced inlining, and experimental encrypted code modules and MDM hooks. Demo shows an app password flow and reset. GitHub repo has active interest (thousands of visitors, hundreds of stars) and a third‑party audit shows controls slow real attackers by days.
AI-written summary · about
chapters (17)
- 0:00Intro
- 0:15About MITRE
- 1:11iOS Security Model
- 2:49Research Scope
- 4:18Hacking and Jailbreaking ios
- 5:46Problem: Standard iOS Application Today
- 6:37Research Idea: IMAS Secure Application Framework
- 7:34iOS Security Architecture
- 10:43İMAS - Security Controls
- 21:19Security Check Deep Dive
- 22:47Forced Inlining
- 24:19Mobile Device Management (MDM) Research
- 28:48Github Use and Value
- 31:49FY14 Technical Approach and Research
- 38:55Audit Summary August 2012
- 39:40STIG Compliance Security Technical implementation Guide
- 40:28Third Party Audit
related talks
47mSecurity Threats & Mitigations for iOS Developers
24mSecurity : protect the body of your app
41miOS App Integrity: Got Any?
37mOutsmarting Hackers before your App gets pwn'ed
49mHow to Hack Your Own Mobile App
58mUncovering OWASP’s Mobile Risks in iOS Apps
27miOS Attack Vectors and how to protect your app
36mTesting iOS Apps without Jailbreak in 2018