NDLI: CRiOS: Toward Large-Scale iOS Application Analysis

Please wait, while we are loading the content...

Hardware Isolation for Trusted Execution

Secure Containers in Android: The Samsung KNOX Case Study

SecuRank: Starving Permission-Hungry Apps Using Contextual Permission Analysis

Hardened Setup of Personalized Security Indicators to Counter Phishing Attacks in Mobile Banking

White Rabbit in Mobile: Effect of Unsecured Clock Source in Smartphones

Securing Recognizers for Rich Video Applications

Picasso: Lightweight Device Class Fingerprinting for Web Clients

What You See Isn't Always What You Get: A Measurement Study of Usage Fraud on Android Apps

On a (Per)Mission: Building Privacy Into the App Marketplace

Detecting Misuse of Google Cloud Messaging in Android Badware

CRiOS: Toward Large-Scale iOS Application Analysis

Exploiting Phone Numbers and Cross-Application Features in Targeted Mobile Attacks

On the CCA (in)Security of MTProto

Analyzing TETRA Location Privacy and Network Availability

CRiOS: Toward Large-Scale iOS Application Analysis

Content Provider	ACM Digital Library
Author	Büchler, Matthias Egele, Manuel Orikogbo, Damilola
Abstract	Mobile applications - or apps - are one of the main reasons for the unprecedented success smart phones and tablets have experienced over the last decade. Apps are the main interfaces that users deal with when engaging in online banking, checking travel itineraries, or browsing their social network profiles while on the go. Previous research has studied various aspects of mobile application security including data leakage and privilege escalation through confused deputy attacks. However, the vast majority of mobile application research targets Google's Android platform. Few research papers analyze iOS applications and those that focus on the Apple environment perform their analysis on comparatively small datasets (i.e., thousands in iOS vs. hundreds of thousands in Android). As these smaller datasets call into question how representative the gained results are, we propose, implement, and evaluate CRiOS, a fully-automated system that allows us to amass comprehensive datasets of iOS applications which we subject to large-scale analysis. To advance academic research into the iOS platform and its apps, we plan on releasing CRiOS as an open source project. We also use CRiOS to aggregate a dataset of 43,404 iOS applications. Equipped with this dataset we analyze the collected apps to identify third-party libraries that are common among many applications. We also investigate the network communication endpoints referenced by the applications with respect to the endpoints' correct use of TLS/SSL certificates. In summary, we find that the average iOS application consists of 60.2% library classes and only 39.8% developer-authored content. Furthermore, we find that 9.32% of referenced network connection endpoints either entirely omit to cryptographically protect network communications or present untrustworthy SSL certificates.
Starting Page	33
Ending Page	42
Page Count	10
File Format	PDF
ISBN	9781450345644
DOI	10.1145/2994459.2994473
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-10-24
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Acm proceedings Ios Security
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in