tailieunhanh - iOS Security

This document provides details about how security technology and features are implemented within the iOS platform. It will also help organizations combine iOS platform security technology and features with their own policies and procedures to meet their specific security needs. | iOS Security February 2014 White Paper iOS Security 2 Contents Page 3 Introduction Page 4 System Security Secure Boot Chain System Software Authorization Secure Enclave Touch ID Page 8 Encryption and Data Protection Hardware Security Features File Data Protection Passcodes Data Protection Classes Keychain Data Protection Keybags FIPS 140-2 Page 14 App Security App Code Signing Runtime Process Security Data Protection in Apps Accessories Page 17 Network Security SSL TLS VPN Wi-Fi Bluetooth Single Sign-on AirDrop Security Page 20 Internet Services iMessage FaceTime Siri iCloud iCloud Keychain Page 27 Device Controls Passcode Protection Configuration Enforcement Mobile Device Management MDM Apple Configurator Device Restrictions Supervised Only Restrictions Remote Wipe Page 31 Conclusion A Commitment to Security Page 32 Glossary White Paper iOS Security 3 Introduction Software Data Protection Class App Sandbox User Partition OS Partition Encrypted File System V Kernel Hardware and Crypto Engine Firmware Device Key Group Key Apple Root Certificate Security architecture diagram of iOS provides a visual overview of the different technologies discussed in this document. Apple designed the iOS platform with security at its core. When we set out to create the best possible mobile OS we drew from decades of experience to build an entirely new architecture. We thought about the security hazards of the desktop environment and established a new approach to security in the design of iOS. We developed and incorporated innovative features that tighten mobile security and protect the entire system by default. As a result iOS is a major leap forward in OS security. Every iOS device combines software hardware and services designed to work together for maximum security and a transparent user experience. iOS protects not only the device and its data at rest but the entire ecosystem including everything users do locally on networks and with key Internet services. iOS and iOS devices .