Creation of an iOS automation framework for security analysis

posted in #IT Security, Mobile & Cloud on the 25.08.2022

Automated analysis tools have been able to find numerous vulnerabilities and problems in mobile operating systems. However, the existing analysis tools focus mainly on the Android operating system. Therefore, this report discusses how such an automated analysis tool can be technically implemented on iOS. For this purpose, a prototype was created, which can automatically create classes, call methods, and read properties. The report discusses the specific problems that had to be solved on iOS in order to create such an analysis tool. In particular, crashes due to incorrect invocations made it necessary to adapt the procedure compared to analysis tools on Android.

Downloads

File Description File size
pdf Project Report (DE) Version 1.0 of 31.07.2022 (German only)
844 KB