Organizer
Partner Company
2020: a new year to research iOS security
Liang Chen
Singular Security Lab
Abstract
iOS 14 is a big version in regarding to security enhancement. It kills the methedology of using fake kernel task port as arbitrary read/write primitive, thus make quite some bugs which is exploitable in iOS unexploitable. Furthermore, iOS 14 also enhanced its PAC (A12 or later): Data PAC, less zero-context PAC, etc. In this talk, I will explain how these mitigations and enhancements made exploitation harder. Also possible ways to bypass those mitigations and enhancements are also discussed.
Speaker Info
Liang Chen is director of Singular Security Lab. Liang has strong research background on browser exploitation, vulnerability discovery and exploitation techniques on Apple platform. He talked at several security conferences such as Black Hat, Infiltrate, RECon, PoC, Cansecwest, etc. Liang is also the winner of iPhone Safari category in Mobile Pwn2own 2013 and Mavericks Safari category in Pwn2Own 2014. He also led the team to win "Master of Pwn" in Pwn2Own 2016, Mobile Pwn2Own 2016 and Mobile Pwn2Own 2017 in his past job. He demonstrated jailbreaks on 'latest' iOS at several global conferences in the past few years.