iOS Access Control & Protecting Software & System Integrity

Overview

This course is designed for intermediate learners with prior knowledge of iOS app development and security. Participants will explore essential techniques for implementing robust access control mechanisms, including Apple ID authentication and biometric authentication. The course will also cover role-based access control and the use of one-time passwords to enhance security. In addition to access control, learners will evaluate software and system integrity by identifying potential vulnerabilities and implementing necessary security measures. The course will address the risks associated with using external code, error handling, and logging. Participants will engage in unit, integration, and system testing to ensure application reliability and performance, as well as learn how to detect jailbroken devices.

Syllabus

Access Control

You have learned many ways to protect data. You can now expand your security efforts by controlling access to the device and the app. Access control is one of the most basic security mechanisms you can implement on a device or in the app itself. Good access control reduces the initial risk of attack or accident. In this course, you will learn about authentication and authorization. You will utilize Apple's strongest built-in authentication mechanisms including two-factor, biometric, and one time code logins. You will also learn about the different authorization types, and implement the most common of these in your app.

Protecting Software and System Integrity

You have gained a solid foundation for implementing the most common security controls in iOS app development. You can now finish up your skill set by learning how to maintain application and device integrity. No study of secure application development would be complete without also understanding how to monitor your code and the platform it runs on. In this final course, you will consider the risks of integrating code you did not write into your app. You will learn how to handle and log errors generated within your app. You will also learn about the many types of tests your app should go through before it is released to users. You will see the risks of running your app on a jailbroken device, and how your app can detect if it has been installed on such a device. You will also learn where to go to continue your security education and finish up with a review of key points from this path.