Project Proposal on Malware and Software Vulnerability Analysis | CAP 6135, Study Guides, Projects, Research of Computer Science

Download Project Proposal on Malware and Software Vulnerability Analysis | CAP 6135 and more Study Guides, Projects, Research Computer Science in PDF only on Docsity!

Tristan Gibeau Ed Leland

Project Proposal

The iPhone is one of the interesting computer products to be released this decade. Combining, as it does, wireless networking, 3G data communication and a powerful handheld computer, the iPhone has the potential to be transformational in nature. This, along with the iPhone’s distinctive design, has resulted in a rapid growth in market share and an even larger role in shaping the future of smartphone development for Apple. However, this combination of large user base, multiple communication methods, and powerful processor has also made the iPhone a target for hackers. Apple has always chosen to exercise tight control over the development of both its hardware and software. It has also been adept at projecting a unified marketing message and using that message to increase market share. Given those realities, the development of the iPhone App Store was natural. However, many developers and users chaffed at the restrictions and controls that Apple placed upon them. Some were dissatisfied by the pricing structure, others by the restrictions on content. Regardless of the reason, their dissatisfaction has led to several methods for unlocking iPhones, collectively known as jail breaking. Unfortunately, as with many things in life, increased freedom can lead to decreased security. Jail breaking a iPhone is the act of placing a pirated operating system, OS, to replace the manufactures system. In the case of jail breaking the iPhone, and its iPod touch counterpart, it is a modified OS, which allows for installation of 3rd^ party applications. In other words it gives full access to the user to implement what ever he or she would like on their device. With this focus of adapting a device for power users, or “hackers”, there are vulnerabilities with this application. The iPhone is a small, handheld computer, running a stripped down version of the Mac OS X, which is also used on Apple’s computer line. This gives many developers the resources needed to make applications for the iPhone. It is a streamlined way to ensure the device runs smoothly and surely. Now, since the OS of the Macintosh computers is Unix (BSD) based, if not configured properly it can leave many security vulnerabilities open to exploit. Besides configuration problems, the OS could have its own set of vulnerabilities, which could lead to a hacker getting into the device. There is also the possibility that a application and/or a user could install a backdoor for a hacker to exploit. This has been done in the past, such as in the original release of the iPhone. There was a exploit in Safari, web browser for Mac OS X, which when a user visited a certain website, it would allow for a attacker to be able to access information from text messages, make calls, download contact list, and other sensitive material. (For more information please see www.exploitingiphone.com )