welcome to 2 beer-talk - compass security...tel +41 55 214 41 60 fax +41 55 214 41 61 [email protected]...
TRANSCRIPT
![Page 1: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/1.jpg)
Tel +41 55 214 41 60 Fax +41 55 214 41 61 [email protected] www.csnc.ch
Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona
Welcome to 2nd Beer-Talk
iPhone Security
![Page 2: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/2.jpg)
© Compass Security AG Slide 2 www.csnc.ch
Who am I ?
Riccardo Trombini, B.Sc. FHO in Computer Science
Business ª Working in IT Security since 2000 ª Study Information Technologies at FH in Rapperswil SG ª IT Security Analyst, with Compass since 2009
Private ª In a relationship with … ª Apple follower, always in the !rst row ª iOS Developer ª Social Media enthusiast (fb, twitter,
foursqure, instagram .. )
![Page 3: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/3.jpg)
Tel +41 55 214 41 60 Fax +41 55 214 41 61 [email protected] www.csnc.ch
Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona
iPhone Security
![Page 4: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/4.jpg)
© Compass Security AG Slide 4 www.csnc.ch
An Ideal World
Centralized management with a MDM solution, to • Enforce security policies • Monitor status of devices • Real-time incident handling
Synchronization • Encrypted channel • Strong authentication
Fully Protected Device • Access Control • Strong Encryption • Vulnerabilities
Fully Aware Users
![Page 5: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/5.jpg)
© Compass Security AG Slide 5 www.csnc.ch
Sadly there is no such thing
Centralized management with a MDM solution, to • Enforce security policies • Monitor status of devices • Real-time incident handling
Synchronization • Encrypted channel • Strong authentication
Fully Protected Device • Access Control • Strong Encryption • Vulnerabilities
Fully Aware Users
![Page 6: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/6.jpg)
© Compass Security AG Slide 6 www.csnc.ch
What is MDM?
• Mobile Device Management
• Centralized Management of mobile devices
![Page 7: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/7.jpg)
© Compass Security AG Slide 7 www.csnc.ch
Functionality
• OTA „Over The Air“ enrollment and pro!le distribution (con!g)
• Easy synchronisation of Emails, Calendar, Contacts, ...
• Enforce compliance policy
• Monitor device status for inventory and compliance • Device Information (UDID, iOS Version, Modem Version ..) • Network Information (Carrier Settings, Data roaming status ..) • Compliance & Security (Installed pro!les, certi!cates, passcode status ..)
• Remote administration like • Remote wipe • Remote lock • Passcode reset • Locate device
![Page 8: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/8.jpg)
© Compass Security AG Slide 8 www.csnc.ch
MDM != MDM – iOS Integration
Nativ iOS Apps Sandbox Client
![Page 9: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/9.jpg)
© Compass Security AG Slide 9 www.csnc.ch
MDM != MDM – Network Design
NOC (Network Operation Center)
![Page 10: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/10.jpg)
© Compass Security AG Slide 10 www.csnc.ch
MDM != MDM – Network Design
Direct Access to DMZ
![Page 11: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/11.jpg)
Tel +41 55 214 41 60 Fax +41 55 214 41 61 [email protected] www.csnc.ch
Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona
Demo #1
Break Passcode Protection Break File Encryption on iPhone
![Page 12: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/12.jpg)
© Compass Security AG Slide 12 www.csnc.ch
iOS Security Controls
• Full Disk Encryption • Since iPhone 3GS • AES CBC 256 bit • does only provide one reason: Rapid device wiping • FDE pretty useless. Kernel transparently decrypts requested !les
• Data Protection API • Introduced with iOS 4 • Additional level of encryption • File encryption can be tied to the Passcode
Encryption
![Page 13: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/13.jpg)
© Compass Security AG Slide 13 www.csnc.ch
iOS Security Controls Encryption - Data Protection API
File Meta Data
File Key Class Key
Device Key
User Passcode Key
![Page 14: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/14.jpg)
© Compass Security AG Slide 14 www.csnc.ch
BootRom-Attack
![Page 15: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/15.jpg)
© Compass Security AG Slide 15 www.csnc.ch
Summary
• User Awareness - Always know where your device is !
• Enforce strong Passcode Policy with MDM! • Length • Alphanumeric • Special characters • C0mpa$$ … don’t ! • Usability?
![Page 16: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/16.jpg)
Tel +41 55 214 41 60 Fax +41 55 214 41 61 [email protected] www.csnc.ch
Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona
LiveDemo [Free-WiFi-CertPush-Attack]
![Page 17: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/17.jpg)
© Compass Security AG Slide 17 www.csnc.ch
WiFi-MidM…
Free-WiFi-Cert-Push-Attack
Free-WiFi Yeah! Free-WiFi available…
![Page 18: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/18.jpg)
© Compass Security AG Slide 18 www.csnc.ch
Free-WiFi-Cert-Push-Attack
The Problem with the Certi!cate….
![Page 19: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/19.jpg)
© Compass Security AG Slide 19 www.csnc.ch
Free-WiFi-Cert-Push-Attack
The Solution ;-)
![Page 20: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/20.jpg)
© Compass Security AG Slide 20 www.csnc.ch
Free-WiFi-Cert-Push-Attack
Behavior of the iPhone … www.apple.com/library/test/success.html
HTTP GET request
OK
Hotspot Management
Hotspot Login-Site
Redirect
![Page 21: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/21.jpg)
© Compass Security AG Slide 21 www.csnc.ch
Free-WiFi-Cert-Push-Attack
Cert-Push … www.apple.com/library/test/success.html
HTTP GET request
Attacker Host
Mobile Con!curation
Redirect
![Page 22: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/22.jpg)
© Compass Security AG Slide 22 www.csnc.ch
Free-WiFi-Cert-Push-Attack
Make your own Apple Certi!cate
![Page 23: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/23.jpg)
© Compass Security AG Slide 23 www.csnc.ch
Free-WiFi-Cert-Push-Attack
Result…
![Page 24: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/24.jpg)
© Compass Security AG Slide 24 www.csnc.ch
Free-WiFi-Cert-Push-Attack
MitM with valid Cert
Attacker Host
Free-WiFi
![Page 25: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/25.jpg)
© Compass Security AG Slide 25 www.csnc.ch
Summary
• User Awareness • Think before accepting con!gurations • Be suspicious
• Apple should improve certi!cate validation for mobile con!guration
• Synchronization should be protected with two-way authentication
![Page 26: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/26.jpg)
© Compass Security AG Slide 26 www.csnc.ch
Questions ?
![Page 27: Welcome to 2 Beer-Talk - Compass Security...Tel +41 55 214 41 60 Fax +41 55 214 41 61 team@csnc.ch Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona Welcome to 2nd Beer-Talk](https://reader030.vdocument.in/reader030/viewer/2022041013/5ec3ccecd7e6705ee77bfac5/html5/thumbnails/27.jpg)
© Compass Security AG Slide 27 www.csnc.ch