Identifying back doors, attack points, and surveillance mechanisms in iOS devices

Digital Investigation

Volumn 11, Issue 1, 2014, Pages 3-19

  Zdziarski, Jonathan ^a  

^a NONE   (United States)

Author keywords

Back doors; Exploitation; Forensics; iOS; Malware; Security; Spyware; Surveillance

Indexed keywords

COMPUTER VIRUSES; DATA PRIVACY; IOS (OPERATING SYSTEM); MALWARE; MONITORING; NATIONAL SECURITY; PERSONAL COMPUTING; SMARTPHONES; SPACE SURVEILLANCE; TELEPHONE SETS;

BACK DOORS; COUNTER-FORENSICS; EXPLOITATION; FORENSICS; GOVERNMENT AGENCIES; NATIONAL SECURITY AGENCIES; PERSONAL PRIVACY; SECURITY; EXPLOITATION IOS; SPY-WARE;

MOBILE SECURITY; IOS (OPERATING SYSTEM);

EID: 84898003401     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2014.01.001     Document Type: Article

References (33)

1. A cross-platform software library and tools to communicate with iOS devices natively http://www.libimobiledevice.org
2. Another certificate authority issues dangerous certificates http://nakedsecurity.sophos.com/2011/11/03/another-certificate-authority-issues- dangerous-certficates/
3. Apparatus and methods for enforcement of policies upon a wireless device http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO2&Sect2=HITOFF&u=/ netahtml/PTO/search-adv.htm&r=36&p=1&f=G&l=50&d=PTXT&S1= (20120828.PD.+AND+Apple.ASNM.http://patft.uspto.gov/netacgi/nph-Parser?Sect1= PTO2&Sect2=HITOFF&u=/netahtml/PTO/search-adv.htm&r=36&p=1&f= G&l=50&d=PTXT&S1=(20120828.PD.+AND+Apple.ASNM.)&OS=ISD/ 20120828+AND+AN/Apple&RS=(ISD/20120828+AND+AN/Apple)
4. Apple deluged by police demands to decrypt iPhones http://news.cnet.com/ 8301-13578-3-57583843-38/apple-deluged-by-police-demands-to-decrypt-iphones/ May 2013
5. Bédrune Jean-Baptiste, Sigwald Jean. iPhone data protection in depth. http://esec-lab.sogeti.com/dotclear/public/publications/11-hitbamsterdam- iphonedataprotection.pdf; http://code.google.com/p/iphone-dataprotection/.
6. Beware of juice jacking http://krebsonsecurity.com/2011/08/beware-of- juice-jacking/
7. 25C3: hacking the iPhone; 2008; http://theiphonewiki.com/wiki/25C3- presentation-%22Hacking-the-iPhone%22.
8. Digital certificate authority hacked http://www.darkreading.com/attacks- breaches/digital-certificate-authority-hacked-doz/231600498
9. Evasi0n jailbreak http://www.evasi0n.com
10. German hackers allegedly break touch ID fingerprint scanner http://www.ibtimes.com/apple-iphone-5s-defeated-german-hackers-allegedly-break- touch-id-fingerprint-scanner-video-1409584
11. Hacking iOS applications http://archive.hack.lu/2012/Mathieu%20RENARD%20- %20Hack.lu%20-%20Hacking%20iOS%20Applications%20v1.0%20Slides.pdf
12. How did Scarlett Johansson's phone get hacked? http://gizmodo.com/ 5841742/how-did-scarlett-johanssons-phone-get-hacked
13. How the NSA cracked the web http://www.newyorker.com/online/blogs/ elements/2013/09/the-nsa-versus-encryption.html
14. How the NSA spies on smartphones including the BlackBerry. Der Spiegel. http://www.spiegel.de/international/world/how-the-nsa-spies-on-smartphones- including-the-blackberry-a-921161.html.
15. How to maintain VOIP socket connection in background http:// stackoverflow.com/questions/5987495/how-to-maintain-voip-socket-connection-in- background
16. How: Gameboy Emulator finding it's way onto non-jailbroken devices http://www.imore.com/how-gameboy-emulator-finding-its-way-non-jailbroken-devices
17. iMessage privacy http://blog.quarkslab.com/imessage-privacy.html
18. iOS 7 and business http://www.apple.com/ios/business/
19. iPhone users are all zombies http://www.theregister.co.uk/2013/09/09/ fanbois-the-nsa-thinks-youre-all-zombies/
20. Lau Billy, Yeongjim Jang, Chengyu Song, Tielei Wang, Pak ho Chung, Royal Paul. Mactans: injecting malware into iOS devices via malicious chargers. In: Black Hat 2013. Georgia Institute of Technology. https://media.blackhat.com/us- 13/US-13-Lau-Mactans-Injecting-Malware-into-iOS-Devices-via-Malicious-Chargers- WP.pdf.
21. Miller Charlie, Blazakis Dion, Zovi Dino Dai, Esser Stefan, Iozzo Vincenzo, Weinmann Ralf-Phillip. iOS hacker's handbook. Wiley. ISBN 978-1118204122.
22. Mozilla toughens up on CA abuse http://news.techworld.com/security/ 3427196/mozilla-toughens-up-on-ca-certificate-abuse/
23. NSA spies reportedly exploited iPhone location bug http://arstechnica. com/security/2013/09/nsa-spies-reportedly-exploited-iphone-location-bug-not- fixed-until-2011/
24. Privacy scandal: NSA can spy on smart phone data Der Spiegel September 7; 2013 http://www.spiegel.de/international/world/privacy-scandal-nsa-can-spy-on- smart-phone-data-a-920971.html
25. Renard Mathieu. Hacking Apple accessories to pown iDevices. Sogeti. http://www.ossir.org/paris/supports/2013/2013-07-09/ipown-redux.pdf.
26. Nicolas Seriot iPhone privacy http://seriot.ch/blog.php?article=20091203 2010
27. The iOS MDM protocol http://media.blackhat.com/bh-us-11/Schuetz/BH-US-11- Schuetz-InsideAppleMDM-WP.pdf
28. The iPhone wiki http://www.theiphonewiki.com
29. Usbmux http://theiphonewiki.com/wiki/Usbmux
30. Usbmuxd http://theiphonewiki.com/wiki/Usbmux
31. xpwntool http://theiphonewiki.com/wiki/Xpwntool
32. Zdziarski iOS forensic investigative methods http://www.zdziarski.com/ blog/?p=2287
33. Zdziarski Jonathan, Media O'Reilly. iPhone forensics. ISBN 978-0596153588.