iOS Application Security

Book Description

Eliminating security holes in iOS apps is critical for any developer who wants to protect their users from the bad guys. In iOS Application Security, mobile security expert David Thiel reveals common iOS coding mistakes that create serious security problems and shows you how to find and fix them.

After a crash course on iOS application structure and Objective-C design patterns, you’ll move on to spotting bad code and plugging the holes. You’ll learn about:

The iOS security model and the limits of its built-in protections

The myriad ways sensitive data can leak into places it shouldn’t, such as through the pasteboard

How to implement encryption with the Keychain, the Data Protection API, and CommonCrypto

Legacy flaws from C that still cause problems in modern iOS applications

Privacy issues related to gathering user data and how to mitigate potential pitfalls

Don’t let your app’s security leak become another headline. Whether you’re looking to bolster your app’s defenses or hunting bugs in other people’s code, iOS Application Security will help you get the job done well.

Author

David Thiel has nearly 20 years of computer security experience. His research and book Mobile Application Security (McGraw-Hill) helped launch the field of iOS application security, and he has presented his work at security conferences like Black Hat and DEF CON. An application security consultant for years at iSEC Partners, Thiel now works for the Internet.org Connectivity Lab.

Book Details

Publisher: No Starch Press

ISBN: 978-1-59327-601-0

By: David Thiel

Year: 2016

Pages: 296

Language: English

File format: PDF

Ebook

Download: iOS Application Security