YoVDO

It Just -Net-works - The Truth About iOS 7's Multipeer Connectivity Framework

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Security Models Courses Encryption Algorithms Courses Bluetooth Courses

Course Description

Overview

Explore the intricacies of iOS 7's Multipeer Connectivity Framework in this 30-minute Black Hat conference talk. Delve into the network-level analysis of device communication over WiFi, uncovering the protocols and encryption algorithms at play. Gain insights into the security model, potential threats, and assumptions developers should consider when leveraging this functionality. Examine the impact of various pairing options, data transmission modes, and encryption settings. Study a real-world application implementation, identifying potential weaknesses and issues. Conclude with the release of a tool designed to uncover vulnerabilities in Multipeer Connectivity applications.

Syllabus

Intro
Multipeer Connectivity
Motivation
MC API - Authentication
Test Setup
Mystery Protocol #1
Mystery Protocol #2
Pro Packet Trace Editing
MC Security Analysis
MCEncryption Optional Downgrade Attack
Conclusion


Taught by

Black Hat

Related Courses

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Black Hat via YouTube
Attacks From a New Front Door in 4G & 5G Mobile Networks
Black Hat via YouTube
AAD Joined Machines - The New Lateral Movement
Black Hat via YouTube
Better Privacy Through Offense - How to Build a Privacy Red Team
Black Hat via YouTube
Whip the Whisperer - Simulating Side Channel Leakage
Black Hat via YouTube