IOS Developer Cheat Sheet - Revision history

Dominique RIGHETTO: Migration to GitHub of the project

2019-02-16T09:41:40Z

Migration to GitHub of the project

2018-05-26T07:59:01Z

Add Other Cheatsheets marker for the book

2018-05-10T09:14:30Z

Replace the content by a reference to the MSTG project according to our plan

2017-09-11T06:18:58Z

‎Other Cheatsheets

2017-09-11T06:18:49Z

2016-06-29T12:08:01Z

"IP number" changed to "IP address", aligned to "Mac address" (-:

2015-07-18T23:16:10Z

moving nav to bottom for mobile friendliness

2015-03-06T21:58:23Z

2014-04-08T03:38:31Z

2013-01-25T18:04:46Z

← Older revision		Revision as of 09:41, 16 February 2019
Line 16:		Line 16:

	Consult this [https://github.com/OWASP/owasp-mstg#ios-testing-guide section] for information about iOS platform.		Consult this [https://github.com/OWASP/owasp-mstg#ios-testing-guide section] for information about iOS platform.
−
−	~~= Other Cheatsheets =~~
−
−	~~{{Cheatsheet_Navigation_Body}}~~
−
−	\|}
−
−	~~[[Category:Cheatsheets]]~~

← Older revision		Revision as of 07:59, 26 May 2018
Line 16:		Line 16:

	Consult this [https://github.com/OWASP/owasp-mstg#ios-testing-guide section] for information about iOS platform.		Consult this [https://github.com/OWASP/owasp-mstg#ios-testing-guide section] for information about iOS platform.
		+
		+	= Other Cheatsheets =

	{{Cheatsheet_Navigation_Body}}		{{Cheatsheet_Navigation_Body}}

@@ Line 127: / Line 127: @@
 Contributors: Jason.Haddix@hp.com
-== Other Cheatsheets ==
+= Other Cheatsheets =
 {{Cheatsheet_Navigation_Body}}

@@ Line 5: / Line 5: @@
 | valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
 = Introduction  =
 This document is written for iOS app developers and is intended to provide a set of basic pointers to vital aspects of developing secure apps for Apple’s iOS operating system. It follows the [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project OWASP Mobile Top 10 Risks] list.

@@ Line 54: / Line 54: @@
 === Remediations ===
 In general follow the same rules as a web app for authentication and authorization.
-Never use a device identifier (e.g., UDID , IP number, MAC address, IMEI) to identify a user or session.
+Never use a device identifier (e.g., UDID , IP address, MAC address, IMEI) to identify a user or session.
 Avoid when possible “out-of-band” authentication tokens sent to the same device as the user is using to log in (e.g., SMS to the same iPhone).
 Implement strong server side authentication, authorization, and session management (control # 4.1-4.6).
@@ Line 62: / Line 62: @@
 === Remediations ===
 For the most part, follow sound session management practices as you would for a web application, with a few twists that are specific to mobile devices.
-Never use a device identifier (e.g., UDID, IP number, MAC address, IMEI) to identify a session. (Control 1.13)
+Never use a device identifier (e.g., UDID, IP address, MAC address, IMEI) to identify a session. (Control 1.13)
 Use only tokens that can be quickly revoked in the event of a lost/stolen device, or compromised session.
 Protect the confidentiality and integrity of session tokens at all times (e.g., always use SSL/TLS when transmitting).

← Older revision		Revision as of 23:16, 18 July 2015
Line 125:		Line 125:

	Contributors: Jason.Haddix@hp.com		Contributors: Jason.Haddix@hp.com
−	~~\| valign="top" style="padding-left:25px;width:300px;border-right: 1px dotted gray;padding-right:25px;" \|~~

	== Other Cheatsheets ==		== Other Cheatsheets ==

@@ Line 108: / Line 108: @@
 OWASP Top 10 Mobile Risks presentation, Appsec USA, Minneapolis, MN, 23 Sept 2011. Jack Mannino, Mike Zusman, and Zach Lanier.
-“iOS Security”, Apple, May 2012, http://images.apple.com/ipad/business/docs/iOS_Security_May12.pdf
+“iOS Security”, Apple, October 2014 https://www.apple.com/business/docs/iOS_Security_Guide_Oct_2014.pdf
 “Deploying iPhone and iPad: Apple Configurator”, Apple, March 2012, http://images.apple.com/iphone/business/docs/iOS_Apple_Configurator_Mar12.pdf

← Older revision		Revision as of 18:04, 25 January 2013
Line 116:		Line 116:

	Ken van Wyk ken[at]krvw.com		Ken van Wyk ken[at]krvw.com
		+
		+	Contributors: Jason.Haddix@hp.com

	= Other Cheatsheets =		= Other Cheatsheets =