Apple has attracted a lot of interest from testers and security researchers and also from detectors.
Now, you guys had an interesting evolution, and this is because initially it was fairly in an insecure
platform, but now it's one of the most secure consumer grade operating systems in the market.
Now, if you look at the overall operating system security, it is actually somewhat similar to Android.
OK, and this is because it actually supports runtime defenses like SLR or address space, Leawood randomization
and things like designing sandboxing and many other security features that we also talked about whenever
we were talking about Android.
OK, now, also, the same threat will apply here, not only in the mobile platform, but also in the
app Beacon Infrastructure.
OK, so things like the authentication and authorization vulnerabilities that we talked about before,
also session management, input, validation, error handling and with crypto, all those actually apply
here as well.
OK, now when we talked about Android, we introduced the concept of routing a device for us.
The term that is actually often used is called jailbreaking or jailbreaking.
The phone or the mobile device.
Jailbreaking can be described as a process of taking full control of an I use based device by performing
the village escalation so that you can install anything in your phone.
Well, if you do that, then you also open your phone for potential malicious applications to be installed.
So in some cases can be considered as a double edged sword.
OK, now some interesting perspective or a security research perspective.
That is actually one of the first things that researchers actually tried to do from the beginning by
a jailbreak, their mobile device.
OK, and this generally can be done by using one of the seven tools that are available for free online.
And in some cases by simply visiting a particular website.
We will examine on how this is done in the next lecture.