iPhone OS: Setup an additional Security Layer

As you might already know the iPhone is itself not that secure that people might think (news is german):

http://www.heise.de/security/meldung/Luecke-in-Datenverschluesselung-des-iPhones-1007818.html

How do you prevent intrusion of your customers data? As a really pragmatic approach, we can just set up additional encryption for our application data:

http://stackoverflow.com/questions/2579453/nsdata-aes-class-encryption-decryption-in-cocoa
http://iphonedevelopment.blogspot.com/2009/02/strong-encryption-for-cocoa-cocoa-touch.html
http://pastie.org/974094/

So if you use for example core data, then on application start you decrypt the database and after termination encrypt it, using the AES class. These are only some basic thoughts and I think that you are better of using higher encryption like blowfish 448bit or even combine it with AES256bit. These encryption is

Your data might live now a little bit securer, but to prevent also code intrusion, you REALLY should strip symbols and obfuscate your code:

http://stackoverflow.com/questions/2442189/write-secure-cocoa-code

and never ever store any secrets or keys in your code!

Also there are some nice reads from Apple you might consider looking at:

http://images.apple.com/iphone/business/docs/iPhone_Security_Overview.pdf

http://www.apple.com/iphone/business/integration/

Related Posts

iPhone OS: Enterprise Business Tools

If you need to manage iPhones or iPads in a big enterprise business, your should read Apples Support Documents: http://www.apple.com/de/support/iphone/enterprise/ and in any case download the iPhone Configuration Tools for Mac OS X: http://support.apple.com/kb/DL851 and for Windows: http://support.apple.com/kb/DL926 You can then setup configuration profiles, that reflect the setup of your environment: • Passcode-Richtlinien • Funktions-Einschränkungen […]

Read More

iPhone OS: Design a nice InApp Purchase View

To get up a nice InAppPurchase View for Apple’s AppStore, we first need some good looking buttons: http://code.google.com/p/iphonegradientbuttons/ http://undefinedvalue.com/2010/02/27/shiny-iphone-buttons-without-photoshop/ http://iphonedevelopment.blogspot.com/2010/05/improved-gradient-buttons.html http://stackoverflow.com/questions/422066/gradients-on-uiview-and-uilabels-on-iphone/ There are also some tweaks for the UITableView you might consider using: http://stackoverflow.com/questions/400965/how-to-customize-the-background-border-colors-of-a-grouped-table-view/ http://stackoverflow.com/questions/986392/programmatically-force-a-uiscrollview-to-stop-scrolling-for-sharing-a-table-view/ more information upcoming…

Read More

Leave a Reply