Matches in SemOpenAlex for { <https://semopenalex.org/work/W1953670109> ?p ?o ?g. }
- W1953670109 endingPage "572" @default.
- W1953670109 startingPage "559" @default.
- W1953670109 abstract "Apple adopts the mandatory app review and code signing mechanisms to ensure that only approved apps can run on iOS devices. In this paper, we present a novel attack method that fundamentally defeats both mechanisms. Our method allows attackers to reliably hide malicious behavior that would otherwise get their app rejected by the Apple review process. Once the app passes the review and is installed on an end user's device, it can be instructed to carry out the intended attacks.The key idea is to make the apps remotely exploitable and subsequently introduce malicious control flows by rearranging signed code. Since the new control flows do not exist during the app review process, such apps, namely Jekyll apps, can stay undetected when reviewed and easily obtain Apple's approval.We implemented a proof-of-concept Jekyll app and successfully published it in App Store. We remotely launched the attacks on a controlled group of devices that installed the app. The result shows that, despite running inside the iOS sandbox, Jekyll app can successfully perform many malicious tasks, such as stealthily posting tweets, taking photos, stealing device identity information, sending email and SMS, attacking other apps, and even exploiting kernel vulnerabilities." @default.
- W1953670109 created "2016-06-24" @default.
- W1953670109 creator A5013217302 @default.
- W1953670109 creator A5043198742 @default.
- W1953670109 creator A5047140382 @default.
- W1953670109 creator A5052526223 @default.
- W1953670109 creator A5057941531 @default.
- W1953670109 date "2013-08-14" @default.
- W1953670109 modified "2023-09-30" @default.
- W1953670109 title "Jekyll on iOS: when benign apps become evil" @default.
- W1953670109 cites W1112477 @default.
- W1953670109 cites W1482566649 @default.
- W1953670109 cites W1555215938 @default.
- W1953670109 cites W173413620 @default.
- W1953670109 cites W1963971515 @default.
- W1953670109 cites W1989734217 @default.
- W1953670109 cites W1996931407 @default.
- W1953670109 cites W2009801020 @default.
- W1953670109 cites W2062340141 @default.
- W1953670109 cites W2098010707 @default.
- W1953670109 cites W2099382052 @default.
- W1953670109 cites W2107881300 @default.
- W1953670109 cites W2109219878 @default.
- W1953670109 cites W2120138937 @default.
- W1953670109 cites W2123436168 @default.
- W1953670109 cites W2132806808 @default.
- W1953670109 cites W2132874238 @default.
- W1953670109 cites W2142145056 @default.
- W1953670109 cites W2161533689 @default.
- W1953670109 cites W2162800072 @default.
- W1953670109 cites W2165269684 @default.
- W1953670109 cites W2168843528 @default.
- W1953670109 cites W2232411669 @default.
- W1953670109 cites W2292483662 @default.
- W1953670109 cites W2397986719 @default.
- W1953670109 cites W2785216240 @default.
- W1953670109 cites W344464876 @default.
- W1953670109 cites W781283046 @default.
- W1953670109 cites W2092670271 @default.
- W1953670109 cites W332253968 @default.
- W1953670109 hasPublicationYear "2013" @default.
- W1953670109 type Work @default.
- W1953670109 sameAs 1953670109 @default.
- W1953670109 citedByCount "36" @default.
- W1953670109 countsByYear W19536701092013 @default.
- W1953670109 countsByYear W19536701092014 @default.
- W1953670109 countsByYear W19536701092015 @default.
- W1953670109 countsByYear W19536701092016 @default.
- W1953670109 countsByYear W19536701092017 @default.
- W1953670109 countsByYear W19536701092018 @default.
- W1953670109 countsByYear W19536701092019 @default.
- W1953670109 countsByYear W19536701092020 @default.
- W1953670109 crossrefType "proceedings-article" @default.
- W1953670109 hasAuthorship W1953670109A5013217302 @default.
- W1953670109 hasAuthorship W1953670109A5043198742 @default.
- W1953670109 hasAuthorship W1953670109A5047140382 @default.
- W1953670109 hasAuthorship W1953670109A5052526223 @default.
- W1953670109 hasAuthorship W1953670109A5057941531 @default.
- W1953670109 hasConcept C10144332 @default.
- W1953670109 hasConcept C111919701 @default.
- W1953670109 hasConcept C136764020 @default.
- W1953670109 hasConcept C167981075 @default.
- W1953670109 hasConcept C177264268 @default.
- W1953670109 hasConcept C199360897 @default.
- W1953670109 hasConcept C26517878 @default.
- W1953670109 hasConcept C2776760102 @default.
- W1953670109 hasConcept C2779794324 @default.
- W1953670109 hasConcept C38652104 @default.
- W1953670109 hasConcept C41008148 @default.
- W1953670109 hasConcept C522325796 @default.
- W1953670109 hasConcept C541664917 @default.
- W1953670109 hasConcept C98045186 @default.
- W1953670109 hasConceptScore W1953670109C10144332 @default.
- W1953670109 hasConceptScore W1953670109C111919701 @default.
- W1953670109 hasConceptScore W1953670109C136764020 @default.
- W1953670109 hasConceptScore W1953670109C167981075 @default.
- W1953670109 hasConceptScore W1953670109C177264268 @default.
- W1953670109 hasConceptScore W1953670109C199360897 @default.
- W1953670109 hasConceptScore W1953670109C26517878 @default.
- W1953670109 hasConceptScore W1953670109C2776760102 @default.
- W1953670109 hasConceptScore W1953670109C2779794324 @default.
- W1953670109 hasConceptScore W1953670109C38652104 @default.
- W1953670109 hasConceptScore W1953670109C41008148 @default.
- W1953670109 hasConceptScore W1953670109C522325796 @default.
- W1953670109 hasConceptScore W1953670109C541664917 @default.
- W1953670109 hasConceptScore W1953670109C98045186 @default.
- W1953670109 hasLocation W19536701091 @default.
- W1953670109 hasOpenAccess W1953670109 @default.
- W1953670109 hasPrimaryLocation W19536701091 @default.
- W1953670109 hasRelatedWork W1425914613 @default.
- W1953670109 hasRelatedWork W1555215938 @default.
- W1953670109 hasRelatedWork W1865564993 @default.
- W1953670109 hasRelatedWork W1912565424 @default.
- W1953670109 hasRelatedWork W1963971515 @default.
- W1953670109 hasRelatedWork W1977634174 @default.
- W1953670109 hasRelatedWork W1988036170 @default.
- W1953670109 hasRelatedWork W1994588724 @default.
- W1953670109 hasRelatedWork W2014390890 @default.