APP (Application) safety protection system and method under IOS (Iphone Operating System)

Abstract

The invention discloses an APP (Application) safety protection system and method under an IOS (Iphone Operating System). The system comprise a safety keyboard module, a user data safety storage module, an App sensitive information storage module, a source code protection module and a safety hot update module, wherein the five safety protection modules are used for carrying out safety protection ona situation that an existing IOS mobile APP has defects and problems. By use of the system, solutions for five safety problems which are usually met in an existing iOS-App development process are integrated into a safety protection frame method, a developer only needs to apply the safety protection method to the App, effective safety protection can be carried out on the App through correct deployment, a developer can conveniently solve an App safety problem, development time is shortened, and the safety of the App is improved.

Description

technical field [0001] The invention belongs to the technical field of mobile security, in particular to a mobile APP security protection method under iOS. technical background [0002] iOS and Android are the mobile operating systems with the highest user usage rate. Among them, the source code of iOS system is not disclosed, and the strict and unified App application review mechanism has higher security than Android; in addition, Apple has designed a series of Security mechanisms, such as: code signing, sandbox mechanism, ASLP, encryption protection, etc. [0003] Although iOS has a relatively complete security mechanism, there are still some common security threats due to the negligence of developers on application security. This method mainly protects against five security threats often encountered in development: [0004] (1) System keyboard security threat. When users use apps, they often encounter sensitive information input problems such as account password input. ...

AI Technical Summary

Problems solved by technology

[0004] (1) System keyboard security threats. When users use apps, they often encounter sensitive information input problems such as account password input. Especially for financial apps, it is very important to protect user data to prevent keyboard input from being monitored.

[0005] (2) Local storage of user data is a security threat. When users use the App, a lot of user information will be generated. Part of the data is stored in the form of a database, and the other part of the data is stored in the local App in the form of large files such as word and PDF. These data If there are no protective measures, it is easy to cause data leakage

[0006] (3) The storage of App sensitive information is a security threat. In the daily development process, the processing of some App sensitive information, such as the App encryption key, is unavoidable. Most developers use hard-coded forms or plist files for storage, but there is a huge security risk Hidden danger, once the App is reversed, the above information will be leaked

[0007] (4) The threat of App source code leakage. In daily development, due to Apple’s existing security hardening technology, developers tend to ignore the protection of App source code. Attackers can obtain communication protocols or codes from the source code through reverse engineering. Logic, attack on App

[0008] (5) Threat of tampering with hot update scripts. In order to meet rapidly changing needs, hot update technology has been used by many apps, but there are still some security issues in the acquisition and storage of hot update script codes

Images