SandScout - Automatic Detection of Flaws in iOS Sandbox Profiles

Explore a conference talk from CCS 2016 that delves into the automatic detection of flaws in iOS sandbox profiles. Learn about the iOS architecture, sandbox system, and the research question addressed by the SandScout tool. Discover the solution overview, including the human-readable graph and sandbox profile language. Examine examples of writable files and the proof of concept implementation. Understand how SandScout works, its results, and the disclosure process for identified vulnerabilities. Gain insights into specific issues found in Apple Maps, iTunes, and other iOS components, including a directory denial of service and a bypass against Contacts. Conclude with the implications of this research for iOS security.