![Page 1: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/1.jpg)
© 2016 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple.
System Frameworks #WWDC16
Session 705
How iOS Security Really Works
Ivan Krstić Head of Security Engineering & Architecture
![Page 2: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/2.jpg)
Unprecedented record of our livesMobile Devices Today
Gb of Data
![Page 3: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/3.jpg)
Unprecedented record of our livesMobile Devices Today
Gb of Data
![Page 4: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/4.jpg)
Unprecedented record of our livesMobile Devices Today
Gb of Data
![Page 5: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/5.jpg)
Gb of Data
Unprecedented record of our livesMobile Devices Today
![Page 6: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/6.jpg)
Who Might Be an Attacker
![Page 7: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/7.jpg)
Who Might Be an Attacker
Criminals
![Page 8: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/8.jpg)
Who Might Be an Attacker
CriminalsBusiness competitors
![Page 9: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/9.jpg)
Who Might Be an Attacker
CriminalsBusiness competitorsService providers
![Page 10: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/10.jpg)
Who Might Be an Attacker
CriminalsBusiness competitorsService providersNation states
![Page 11: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/11.jpg)
Who Might Be an Attacker
CriminalsBusiness competitorsService providersNation statesRomantic partners, family, friends
![Page 12: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/12.jpg)
Who Might Be an Attacker
CriminalsBusiness competitorsService providersNation statesRomantic partners, family, friendsCats
![Page 13: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/13.jpg)
![Page 14: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/14.jpg)
What Do Attackers Want?
![Page 15: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/15.jpg)
What Do Attackers Want?
Personal stalking and surveillance
![Page 16: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/16.jpg)
What Do Attackers Want?
Personal stalking and surveillanceCorporate espionage
![Page 17: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/17.jpg)
What Do Attackers Want?
Personal stalking and surveillanceCorporate espionageDirect financial benefit
![Page 18: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/18.jpg)
How Do We Know This?We see it on other platforms
![Page 19: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/19.jpg)
But Not on iOSNo malware has affected iOS devices at scale
![Page 20: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/20.jpg)
iOS Security
![Page 21: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/21.jpg)
iOS Security
Decade-long effort to protect customers from security problems
![Page 22: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/22.jpg)
iOS Security
Decade-long effort to protect customers from security problemsIncredible scale
![Page 23: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/23.jpg)
iOS Security
Decade-long effort to protect customers from security problemsIncredible scale Every single iOS security feature is designed to thwart a real security threat
![Page 24: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/24.jpg)
iOS Security Pillars
![Page 25: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/25.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 26: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/26.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 27: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/27.jpg)
Traditional Security
physical security
secure configuration
installing latest patches
password policy
vetted apps
mandated policies
![Page 28: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/28.jpg)
Traditional Security
physical security
secure configuration
installing latest patches
password policy
vetted apps
mandated policies
iOS Security
security built from silicon up
secure default settings
easy updates
Touch ID
App Store
ease of use
![Page 29: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/29.jpg)
![Page 30: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/30.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 31: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/31.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 32: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/32.jpg)
![Page 33: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/33.jpg)
![Page 34: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/34.jpg)
Trust built from silicon up
![Page 35: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/35.jpg)
Application Processor
![Page 36: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/36.jpg)
Application Processor
Boot ROM
![Page 37: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/37.jpg)
Application Processor
Boot ROM
Apple Public Key
![Page 38: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/38.jpg)
Application Processor
Boot ROM
Apple Public Key
Apple Public Key
![Page 39: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/39.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)
Apple Public Key
Apple Public Key
?
![Page 40: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/40.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)
Apple Public Key
Apple Public Key
?
![Page 41: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/41.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)iBoot
Apple Public Key
Apple Public Key
?
![Page 42: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/42.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)iBoot
Apple Public Key
Apple Public Key
?
![Page 43: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/43.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)iBoot Kernel
Apple Public Key
Apple Public Key
?
![Page 44: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/44.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)iBoot Kernel
Apple Public Key
Apple Public Key
?
![Page 45: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/45.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)iBoot Kernel iOS
Apple Public Key
Apple Public Key
?
![Page 46: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/46.jpg)
Application Processor
Boot ROM
Low-Level Bootloader
(LLB)iBoot Kernel iOS
Apple Public Key
Apple Public Key
![Page 47: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/47.jpg)
Trusting Secure Boot
![Page 48: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/48.jpg)
Trusting Secure Boot
Keys are securely provisioned and managed by Apple
![Page 49: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/49.jpg)
Trusting Secure Boot
Keys are securely provisioned and managed by AppleSoftware updates are authorized individually for each device
![Page 50: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/50.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 51: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/51.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 52: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/52.jpg)
Data Protection
![Page 53: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/53.jpg)
Data Protection
User data is encrypted at rest with keys derived from the passcode
![Page 54: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/54.jpg)
Data Protection
User data is encrypted at rest with keys derived from the passcodeEntangled with hardware key in SEP
![Page 55: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/55.jpg)
Data Protection
![Page 56: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/56.jpg)
Data Protection
SEP refuses to unlock after more than 10 incorrect passcode attempts
![Page 57: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/57.jpg)
Data Protection
SEP refuses to unlock after more than 10 incorrect passcode attempts‘Erase Data’ only controls erasure, not ability to unlock
![Page 58: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/58.jpg)
![Page 59: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/59.jpg)
Standard algorithmsInternal security audits3rd-party code review
![Page 60: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/60.jpg)
![Page 61: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/61.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 62: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/62.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 63: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/63.jpg)
Isolating data between apps App
![Page 64: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/64.jpg)
![Page 65: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/65.jpg)
TransparencyConsentControl
![Page 66: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/66.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 67: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/67.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 68: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/68.jpg)
Code Signing
![Page 69: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/69.jpg)
Code Signing
Attacker’s first step: code executioniOS code signing covers not just the OS, but every app that runs
![Page 70: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/70.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 71: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/71.jpg)
Secure Boot
Data Protection
Sandboxing
Code Signing
Touch ID
1
2
3
4
5
![Page 72: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/72.jpg)
Average user unlocks per day
80
![Page 73: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/73.jpg)
![Page 74: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/74.jpg)
EasyFastProtects user data
![Page 75: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/75.jpg)
![Page 76: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/76.jpg)
Secure EnclaveSensor
Touch ID
![Page 77: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/77.jpg)
Link encrypted with Shared Secret
Secure EnclaveSensor
Touch ID
![Page 78: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/78.jpg)
Link encrypted with Shared Secret
Secure EnclaveSensor
Touch ID
![Page 79: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/79.jpg)
Link encrypted with Shared Secret
Secure EnclaveSensor
Touch ID
![Page 80: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/80.jpg)
Link encrypted with Shared Secret
Secure EnclaveSensor
Touch ID
![Page 81: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/81.jpg)
Link encrypted with Shared Secret 01001010
10100101
01010001
11100010
Secure EnclaveSensor
Touch ID
![Page 82: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/82.jpg)
Link encrypted with Shared Secret 01 01 10
10 0 101
010 0 1
1 10 0
Secure EnclaveSensor
Touch ID
![Page 83: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/83.jpg)
Passcode usage before Touch ID
49%
![Page 84: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/84.jpg)
49%
89%
Passcode usage after Touch ID
![Page 85: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/85.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 86: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/86.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 87: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/87.jpg)
![Page 88: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/88.jpg)
Smaller install footprint
5GB
4GB
3GB
2GB
1GB
![Page 89: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/89.jpg)
iOS 8 iOS 9
Smaller install footprint
5GB
4GB
3GB
2GB
1GB
![Page 90: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/90.jpg)
iOS 8 iOS 9
Smaller install footprint
5GB 4.6GB
4GB
3GB
2GB
1GB
![Page 91: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/91.jpg)
iOS 8 iOS 9
Smaller install footprint
5GB 4.6GB
1.3GB
4GB
3GB
2GB
1GB
![Page 92: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/92.jpg)
![Page 93: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/93.jpg)
5%iOS 8 11%
iOS 9 84%
iOS Installed Base
![Page 94: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/94.jpg)
Earlier 89.9%
6.0 10.1%
Android Installed Base
![Page 95: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/95.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 96: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/96.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 97: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/97.jpg)
Follow Best Practices
![Page 98: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/98.jpg)
Follow Best Practices
Touch IDApp Transport Security
![Page 99: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/99.jpg)
Follow Best Practices
Touch IDApp Transport Security• Required by App Store at end of 2016
NEW
![Page 100: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/100.jpg)
Follow Best Practices
Touch IDApp Transport Security• Required by App Store at end of 2016• TLS v1.2, with exceptions for already-
encrypted bulk data like media streaming
NEW
![Page 101: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/101.jpg)
Know Your Code
![Page 102: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/102.jpg)
Know Your Code
You are responsible for third-party code you include in your apps
![Page 103: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/103.jpg)
Know Your Code
You are responsible for third-party code you include in your appsLibraries you use may undermine app security
![Page 104: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/104.jpg)
Know Your Code
You are responsible for third-party code you include in your appsLibraries you use may undermine app securityKeep them current!
![Page 105: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/105.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 106: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/106.jpg)
iOS Platform Security
Users Upgrading their Software
Developers Building Secure Apps
![Page 107: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/107.jpg)
How well are we doing?
![Page 108: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/108.jpg)
No iOS malware at scale
![Page 109: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/109.jpg)
5-10 vulnerabilities
![Page 110: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/110.jpg)
$1 million
![Page 111: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/111.jpg)
Security is a process, not a destination
![Page 112: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/112.jpg)
![Page 113: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/113.jpg)
More Information
https://developer.apple.com/wwdc16/705
![Page 114: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/114.jpg)
Related Sessions
What’s New in Security Nob Hill Tuesday 5:00PM
Engineering Privacy for Your Users Pacific Heights Wednesday 4:00PM
![Page 115: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/115.jpg)
Labs
Security & Privacy Lab 1 Frameworks Lab C Wednesday 9:00AM
Security & Privacy Lab 2 Frameworks Lab B Thursday 9:00AM
![Page 116: 705 How iOS Security Really Works 04 FINAL - Apple Inc.€¦ · Every single iOS security feature is designed to thwart a real security threat. iOS Security Pillars. iOS Platform](https://reader030.vdocument.in/reader030/viewer/2022041111/5f13b819faaf5423f509f947/html5/thumbnails/116.jpg)