Creation of an iOS automation framework for security analysis

Download as PDF (0.1 MB)

The full text is currently only available in the Deutsch version. A translation will follow. Go to the Deutsch version

Archived. This content is no longer updated. It remains available for reference. Go to the archive

Version
2022-07-31
Source
https://technology2.a-sit.at/en/publications/creation-of-an-ios-automation-framework-for-security-analysis/

Automated analysis tools have been able to find numerous vulnerabilities and problems in mobile operating systems. However, the existing analysis tools focus mainly on the Android operating system. Therefore, this report discusses how such an automated analysis tool can be technically implemented on iOS. For this purpose, a prototype was created, which can automatically create classes, call methods, and read properties. The report discusses the specific problems that had to be solved on iOS in order to create such an analysis tool. In particular, crashes due to incorrect invocations made it necessary to adapt the procedure compared to analysis tools on Android.