Behind the Scenes of iOS Security
summary
Apple describes three concrete iOS 10 changes: a WebKit JIT that splits one 32MB region into executable and secret writable mappings and emits a small execute-only JIT page that memcpys code into the secret mapping so a JavaScript exploit can’t simply write-and-run; Data Protection relying on a factory-generated uid key non-exportable inside Secure Enclave that enforces a 10-attempt hardware lockout and per-file ephemeral wrapping; and an iCloud Keychain sync/escrow built on a Cloud Key Vault with Cloud Key Vault quorum clubs to prevent backend brute force and enable recovery.
AI-written summary · about
chapters (16)
- 0:00Introduction to iOS Security
- 1:02Hardened WebKit JIT Mapping
- 4:28Security Demonstration
- 6:33Secure Enclave Processor
- 9:38Data Protection Architecture
- 14:03Device Boot and Unlock
- 17:44Device Lock and Touch ID
- 18:59Secure Software Updates
- 21:17Production Debugging
- 22:40Synchronizing User Secrets
- 25:43iCloud Keychain Backup
- 27:14Cloud Key Vault Security
- 29:57Cloud Key Vault Quorum
- 32:26Secure Ceremony Procedures
- 35:59Apple Security Bounty
- 39:17Q&A Session
related talks
44mBehind the scenes of iOS and Mac Security
47mSecurity Threats & Mitigations for iOS Developers
24mDeconstructing The Beast: A Deep Dive Into JIT Compilation Attacks In iOS
27miOS Attack Vectors and how to protect your app
25mBetter safe than sorry
43miOS Application Defense - iMAS
24mSecurity : protect the body of your app
38mSide Channel Attacks: Lessons Learned Or Troubles Ahead?