The mobile device sector has grown over the past years. Most of us have a smartphone or tablet carrying with us every day. But the advanced mobility also requires special security enforcement as the devices store a lot of sensitive data and can be easily stolen or lost. Developers for the iOS platform have to pay attention to avoid common pitfalls when developing applications. Buffer overflows, format string vulnerabilities, SQL injections, Cross-Site Scripting, data leakage or theft are security issues which can happen if user input has not been sanitized correctly. This paper is meant to point out common mistakes in the iOS app development by showing Objective-C and Swift source code. Furthermore, it introduces the reader to the principles of reverse engineering so that third party applications can be audited for those bug classes.
分享
引用
