Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Dial M For Mitigation

521 views

Published on

A presentation of some of the security features and APIs in iPhone OS, allowing discussion of the threat model underlying Apple's chosen mitigation technology.

Published in: Technology, Education
  • Be the first to comment

  • Be the first to like this

Dial M For Mitigation

  1. 1. Dial M for Mitigation Graham Lee
  2. 2. Code Signing - Identity Private Key Public Key
  3. 3. Code Signing - Identity Private Key Public Key
  4. 4. Code Signing - Identity Private Key Public Key
  5. 5. Code Signing - Identity Private Key Public Key
  6. 6. Code Signing - Identity Private Key Public Key
  7. 7. Code Signing - Identity Private Key Public Key
  8. 8. Code Signing - Identity Private Key Public Key
  9. 9. Code Signing - Identity Private Key Public Key 50f4b5a228b18a0c55747daee6f09c3800773b14
  10. 10. Code Signing - Identity Private Key Public Key
  11. 11. Code Signing - Identity Private Key Public Key
  12. 12. Code Signing - Identity Private Key Public Key 50f4b5a228b18a0c55747daee6f09c3800773b14
  13. 13. Code Signing - Identity Private Key Public Key 50f4b5a228b18a0c55747daee6f09c3800773b14 50f4b5a228b18a0c55747daee6f09c3800773b14
  14. 14. Code Signing - Identity Private Key Public Key
  15. 15. Code Signing - Identity Private Key Public Key
  16. 16. Code Signing - Identity Private Key
  17. 17. Application Signing MyGreatApp.ipa
  18. 18. Application Signing MyGreatApp MacOS Contents Resources NIBs, images… MyGreatApp.ipa
  19. 19. Application Signing MyGreatApp NIBs, images… MyGreatApp.ipa
  20. 20. Application Signing MyGreatApp NIBs, images… MyGreatApp.ipa
  21. 21. Application Signing MyGreatApp NIBs, images… MyGreatApp.ipa
  22. 22. Application Signing MyGreatApp NIBs, images… MyGreatApp.ipa
  23. 23. Code Signing - Requirements MyGreatApp.ipa
  24. 24. Code Signing - Requirements MyGreatApp.ipa
  25. 25. Code Signing - Requirements MyGreatApp.ipa
  26. 26. Code Signing - App Store A B C D
  27. 27. Code Signing - App Store A B C D
  28. 28. Code Signing - App Store A B C D
  29. 29. Code Signing - App Store A B C D
  30. 30. Code Signing - App Store A B C D
  31. 31. Code Signing - App Store A B C D
  32. 32. Code Signing - App Store A B C D
  33. 33. Keychain Services • Passwords • Certificates • Private Keys • Data blobs
  34. 34. Keychain Services • Passwords • Certificates • Private Keys • Data blobs
  35. 35. Sandbox
  36. 36. Sandbox /tmp
  37. 37. Sandbox /tmp
  38. 38. Sandbox /tmp /tmp
  39. 39. Sandbox /tmp /tmp /tmp
  40. 40. iamleeg
  41. 41. iamleeg

×