iOS Application Security

The Definitive Guide for Hackers and Developers

David Thiel (Autor)

Buch | Softcover

296 Seiten

2016
No Starch Press (Verlag)
978-1-59327-601-0 (ISBN)

Artikel merken

»iOS Application Security« covers everything you need to know to design secure iOS apps from the ground up and keep users' data safe.

Eliminating security holes in iOS apps is critical for any developer who wants to protect their users from the bad guys. In iOS Application Security, mobile security expert David Thiel reveals common iOS coding mistakes that create serious security problems and shows you how to find and fix them.

After a crash course on iOS application structure and Objective-C design patterns, you’ll move on to spotting bad code and plugging the holes.

You’ll learn about:

The iOS security model and the limits of its built-in protections
The myriad ways sensitive data can leak into places it shouldn’t, such as through the pasteboard
How to implement encryption with the Keychain, the Data Protection API, and CommonCrypto
Legacy flaws from C that still cause problems in modern iOS applications
Privacy issues related to gathering user data and how to mitigate potential pitfalls

Don’t let your app’s security leak become another headline. Whether you’re looking to bolster your app’s defenses or hunting bugs in other people’s code, iOS Application Security will help you get the job done well.

David Thiel has almost 20 years of computer security experience, with expertise in penetration testing and iOS application security. He has presented at security conferences like BlackHat and DEFCON, and he currently works as a Vice President at the security firm iSEC Partners. Thiel's research and his work on Mobile Application Security (McGraw Hill) helped launch the field of iOS application security.

Introduction

PART I: IOS FUNDAMENTALS
Chapter 1: The iOS Security Model
Chapter 2: Objective-C for the Lazy
Chapter 3: iOS Application Anatomy

PART II: SECURITY TESTING
Chapter 4: Building Your Test Platform
Chapter 5: Debugging with lldb and Friends
Chapter 6: Black-Box Testing

PART III: SECURITY QUIRKS OF THE COCOA API
Chapter 7: iOS Networking
Chapter 8: Interprocess Communication
Chapter 9: iOS-Targeted Web Apps
Chapter 10: Data Leakage
Chapter 11: Legacy Issues and Baggage from C
Chapter 12: Injection Attacks

PART IV: KEEPING DATA SAFE
Chapter 13: Encryption and Authentication
Chapter 14: Mobile Privacy Concerns

Erscheint lt. Verlag	16.2.2016
Verlagsort	Daly City, California
Sprache	englisch
Maße	180 x 234 mm
Gewicht	566 g
Einbandart	kartoniert
Themenwelt	Informatik ► Programmiersprachen / -werkzeuge ► Mac / Cocoa Programmierung
Themenwelt	Informatik ► Weitere Themen ► Smartphones / Tablets
Schlagworte	iOS Apps • Sicherheit
ISBN-10	1-59327-601-X / 159327601X
ISBN-13	978-1-59327-601-0 / 9781593276010
Zustand	Neuware