Hacking and Securing iOS Applications

If you’re an app developer with a solid foundation in Objective-C, this book is an absolute must—chances are very high that your company’s iOS applications are vulnerable to attack. That’s because malicious attackers now use an arsenal of tools to reverse-engineer, trace, and manipulate applications in ways that most programmers aren’t aware of.

This guide illustrates several types of iOS attacks, as well as the tools and techniques that hackers use. You’ll learn best practices to help protect your applications, and discover how important it is to understand and strategize like your adversary.

• Examine subtle vulnerabilities in real-world applications—and avoid the same problems in your apps
• Learn how attackers infect apps with malware through code injection
• Discover how attackers defeat iOS keychain and data-protection encryption
• Use a debugger and custom code injection to manipulate the runtime Objective-C environment
• Prevent attackers from hijacking SSL sessions and stealing traffic
• Securely delete files and design your apps to prevent forensic data leakage
• Avoid debugging abuse, validate the integrity of run-time classes, and make your code harder to trace

Table of Contents
Chapter 1. Everything You Know Is Wrong

Part I: Hacking
Chapter 2. The Basics of Compromising iOS
Chapter 3. Stealing the Filesystem
Chapter 4. Forensic Trace and Data Leakage
Chapter 5. Defeating Encryption
Chapter 6. Unobliterating Files
Chapter 7. Manipulating the Runtime
Chapter 8. Abusing the Runtime Library
Chapter 9. Hijacking Traffic

Part II: Securing
Chapter 10. Implementing Encryption
Chapter 11. Counter Forensics
Chapter 12. Securing the Runtime
Chapter 13. Jailbreak Detection
Chapter 14. Next Steps

Book Details

• Paperback: 356 pages
• Publisher: O’Reilly Media (January 2012)
• Language: English
• ISBN-10: 1449318746
• ISBN-13: 978-1449318741