Launching Generic Attacks on iOS with Approved Third-Party Applications

  • Jin Han
  • Su Mon Kywe
  • Qiang Yan
  • Feng Bao
  • Robert Deng
  • Debin Gao
  • Yingjiu Li
  • Jianying Zhou
Conference paper

DOI: 10.1007/978-3-642-38980-1_17

Part of the Lecture Notes in Computer Science book series (LNCS, volume 7954)
Cite this paper as:
Han J. et al. (2013) Launching Generic Attacks on iOS with Approved Third-Party Applications. In: Jacobson M., Locasto M., Mohassel P., Safavi-Naini R. (eds) Applied Cryptography and Network Security. ACNS 2013. Lecture Notes in Computer Science, vol 7954. Springer, Berlin, Heidelberg

Abstract

iOS is Apple’s mobile operating system, which is used on iPhone, iPad and iPod touch. Any third-party applications developed for iOS devices are required to go through Apple’s application vetting process and appear on the official iTunes App Store upon approval. When an application is downloaded from the store and installed on an iOS device, it is given a limited set of privileges, which are enforced by iOS application sandbox. Although details of the vetting process and the sandbox are kept as black box by Apple, it was generally believed that these iOS security mechanisms are effective in defending against malwares.

In this paper, we propose a generic attack vector that enables third-party applications to launch attacks on non-jailbroken iOS devices. Following this generic attack mechanism, we are able to construct multiple proof-of-concept attacks, such as cracking device PIN and taking snapshots without user’s awareness. Our applications embedded with the attack codes have passed Apple’s vetting process and work as intended on non-jailbroken devices. Our proof-of-concept attacks have shown that Apple’s vetting process and iOS sandbox have weaknesses which can be exploited by third-party applications. We further provide corresponding mitigation strategies for both vetting and sandbox mechanisms, in order to defend against the proposed attack vector.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2013

Authors and Affiliations

  • Jin Han
    • 1
  • Su Mon Kywe
    • 2
  • Qiang Yan
    • 2
  • Feng Bao
    • 1
  • Robert Deng
    • 2
  • Debin Gao
    • 2
  • Yingjiu Li
    • 2
  • Jianying Zhou
    • 1
  1. 1.Institute for Infocomm ResearchSingapore
  2. 2.Singapore Management UniversitySingapore

Personalised recommendations