iOS-based defense method for masque attacks of application

• Main Authors: YU HONGYANG, LIANG ZEHUA
• Format: Patent
• Language: Chinese; English
• Published: 21.07.2017
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention discloses an iOS-based defense method for masque attacks of an application, and belongs to the field of mobile intelligent operation system security. By utilizing a cooperative effect between an authentication mechanism and an exclusive private key, masque attacks in different forms are prevented. A protective mechanism prevents attack means, including replay attack and non-verified application updating, commonly used in two masque attacks. By implementing the method, a practical and easy-to-implement solution can be provided for the masque attacks. 本发明公开了种基于iOS的应用程序遭遇假面攻击的防御方法，属于移动智能操作系统安全的范畴。本发明利用认证机制和专属私钥之间的协同作用，来防范不同形式的假面攻击。本发明的防护机制阻止了两个假面攻击中经常用到的攻击手段，分别是重放攻击和未经验证的应用更新。因此，本发明的实施，能为假面攻击提供务实和易于实施的解决方案。