David Thiel has almost 20 years of computer security experience, with expertise in penetration testing and iOS application security. He has presented at security conferences like BlackHat and DEFCON, and he currently works as a Vice President at the security firm iSEC Partners. Thiel's research and his work on Mobile Application Security (McGraw Hill) helped launch the field of iOS application security.

“The book is strongly recommended for all iOS app developers, especially for those who use the Objective-C programming language.”—Computing Reviews“In summary, this is a book that every iOS developer needs to read and then act on. The next time you see an app that leaks private data everywhere, is vulnerable to a whole host of injection attacks, and uses crypto like it’s 1995, ask them why they didn’t consult this book before shipping.”—;login:“iOS Application Security offers an excellent foundation for anyone interested in ethical hacking on mobile platforms. This is going to be a growing sector of the penetration testing industry, as mobile devices assume an ever-greater importance in corporate IT estates."—Network Security Newsletter"Worthy read and covers a lot of ground in 200ish pages. Well recommended."—Michael Howard, author of Writing Secure Code"A major asset to any iOS developer who wants to ensure his app's ability to protect a user's data. I would highly recommend anyone interested in the field of iOS app security to take a close look at iOS Application Security."—MacTrast

• IntroductionPART I: IOS FUNDAMENTALS Chapter 1: The iOS Security ModelChapter 2: Objective-C for the LazyChapter 3: iOS Application AnatomyPART II: SECURITY TESTINGChapter 4: Building Your Test Platform Chapter 5: Debugging with lldb and FriendsChapter 6: Black-Box TestingPART III: SECURITY QUIRKS OF THE COCOA APIChapter 7: iOS NetworkingChapter 8: Interprocess CommunicationChapter 9: iOS-Targeted Web AppsChapter 10: Data LeakageChapter 11: Legacy Issues and Baggage from CChapter 12: Injection AttacksPART IV: KEEPING DATA SAFEChapter 13: Encryption and AuthenticationChapter 14: Mobile Privacy Concerns

David Thiel has almost 20 years of computer security experience, with expertise in penetration testing and iOS application security. He has presented at security conferences like BlackHat and DEFCON, and he currently works as a Vice President at the security firm iSEC Partners. Thiel's research and his work on Mobile Application Security (McGraw Hill) helped launch the field of iOS application security.

“The book is strongly recommended for all iOS app developers, especially for those who use the Objective-C programming language.”—Computing Reviews“In summary, this is a book that every iOS developer needs to read and then act on. The next time you see an app that leaks private data everywhere, is vulnerable to a whole host of injection attacks, and uses crypto like it’s 1995, ask them why they didn’t consult this book before shipping.”—;login:“iOS Application Security offers an excellent foundation for anyone interested in ethical hacking on mobile platforms. This is going to be a growing sector of the penetration testing industry, as mobile devices assume an ever-greater importance in corporate IT estates."—Network Security Newsletter"Worthy read and covers a lot of ground in 200ish pages. Well recommended."—Michael Howard, author of Writing Secure Code"A major asset to any iOS developer who wants to ensure his app's ability to protect a user's data. I would highly recommend anyone interested in the field of iOS app security to take a close look at iOS Application Security."—MacTrast

• IntroductionPART I: IOS FUNDAMENTALS Chapter 1: The iOS Security ModelChapter 2: Objective-C for the LazyChapter 3: iOS Application AnatomyPART II: SECURITY TESTINGChapter 4: Building Your Test Platform Chapter 5: Debugging with lldb and FriendsChapter 6: Black-Box TestingPART III: SECURITY QUIRKS OF THE COCOA APIChapter 7: iOS NetworkingChapter 8: Interprocess CommunicationChapter 9: iOS-Targeted Web AppsChapter 10: Data LeakageChapter 11: Legacy Issues and Baggage from CChapter 12: Injection AttacksPART IV: KEEPING DATA SAFEChapter 13: Encryption and AuthenticationChapter 14: Mobile Privacy Concerns

David Thiel has almost 20 years of computer security experience, with expertise in penetration testing and iOS application security. He has presented at security conferences like BlackHat and DEFCON, and he currently works as a Vice President at the security firm iSEC Partners. Thiel's research and his work on Mobile Application Security (McGraw Hill) helped launch the field of iOS application security.

“The book is strongly recommended for all iOS app developers, especially for those who use the Objective-C programming language.”—Computing Reviews“In summary, this is a book that every iOS developer needs to read and then act on. The next time you see an app that leaks private data everywhere, is vulnerable to a whole host of injection attacks, and uses crypto like it’s 1995, ask them why they didn’t consult this book before shipping.”—;login:“iOS Application Security offers an excellent foundation for anyone interested in ethical hacking on mobile platforms. This is going to be a growing sector of the penetration testing industry, as mobile devices assume an ever-greater importance in corporate IT estates."—Network Security Newsletter"Worthy read and covers a lot of ground in 200ish pages. Well recommended."—Michael Howard, author of Writing Secure Code"A major asset to any iOS developer who wants to ensure his app's ability to protect a user's data. I would highly recommend anyone interested in the field of iOS app security to take a close look at iOS Application Security."—MacTrast

• IntroductionPART I: IOS FUNDAMENTALS Chapter 1: The iOS Security ModelChapter 2: Objective-C for the LazyChapter 3: iOS Application AnatomyPART II: SECURITY TESTINGChapter 4: Building Your Test Platform Chapter 5: Debugging with lldb and FriendsChapter 6: Black-Box TestingPART III: SECURITY QUIRKS OF THE COCOA APIChapter 7: iOS NetworkingChapter 8: Interprocess CommunicationChapter 9: iOS-Targeted Web AppsChapter 10: Data LeakageChapter 11: Legacy Issues and Baggage from CChapter 12: Injection AttacksPART IV: KEEPING DATA SAFEChapter 13: Encryption and AuthenticationChapter 14: Mobile Privacy Concerns