Kindle Price: $29.99

Promotions apply when you purchase

These promotions will be applied to this item:

Some promotions may be combined; others are not eligible to be combined with other offers. For details, please see the Terms & Conditions associated with these promotions.

eBook features:
  • Highlight, take notes, and search in the book
  • In this edition, page numbers are just like the physical edition
Read with our free app
You've subscribed to ! We will preorder your items within 24 hours of when they become available. When new books are released, we'll charge your default payment method for the lowest price available during the pre-order period.
Update your device or payment method, cancel individual pre-orders or your subscription at
Your Memberships & Subscriptions

Buy for others

Give as a gift or purchase for a team or group.
Learn more

Buying and sending eBooks to others

  1. Select quantity
  2. Buy and send eBooks
  3. Recipients can read on any device

These ebooks can only be redeemed by recipients in the US. Redemption links and eBooks cannot be resold.
Kindle app logo image

Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.

Read instantly on your browser with Kindle for Web.

Using your mobile phone camera - scan the code below and download the Kindle app.

QR code to download the Kindle App

Amazon book clubs early access
Loading your book clubs
There was a problem loading your book clubs. Please try again.
Not in a club? Learn more
Amazon book clubs early access

Join or create book clubs

Choose books together

Track your books
Bring your club to Amazon Book Clubs, start a new book club and invite your friends to join, or find a club that’s right for you for free.
Explore Amazon Book Clubs

iOS Application Security: The Definitive Guide for Hackers and Developers 1st Edition, Kindle Edition

by David Thiel (Author) Format: Kindle Edition
4.2 4.2 out of 5 stars 20 ratings
See all formats and editions
Eliminating security holes in iOS apps is critical for any developer who wants to protect their users from the bad guys. In iOS Application Security, mobile security expert David Thiel reveals common iOS coding mistakes that create serious security problems and shows you how to find and fix them.

After a crash course on iOS application structure and Objective-C design patterns, you’ll move on to spotting bad code and plugging the holes. You’ll learn about:
–The iOS security model and the limits of its built-in protections
–The myriad ways sensitive data can leak into places it shouldn’t, such as through the pasteboard
–How to implement encryption with the Keychain, the Data Protection API, and CommonCrypto
–Legacy flaws from C that still cause problems in modern iOS applications
–Privacy issues related to gathering user data and how to mitigate potential pitfalls

Don’t let your app’s security leak become another headline. Whether you’re looking to bolster your app’s defenses or hunting bugs in other people’s code, iOS Application Security will help you get the job done well.
Previous page
  1. ISBN-13
    978-1593276010
  2. Edition
    1st
  3. Sticky notes
    On Kindle Scribe
  4. Publisher
    No Starch Press
  5. Publication date
    February 16, 2016
  6. Language
    English
  7. File size
    21224 KB
  8. See all details
Next page
Due to its large file size, this book may take longer to download
Add a debit or credit card to save time when you check out
Convenient and secure with 2 clicks. Add your card

Editorial Reviews

Review

“The book is strongly recommended for all iOS app developers, especially for those who use the Objective-C programming language.”
—Computing Reviews

“In summary, this is a book that every iOS developer needs to read and then act on. The next time you see an app that leaks private data everywhere, is vulnerable to a whole host of injection attacks, and uses crypto like it’s 1995, ask them why they didn’t consult this book before shipping.”
—;login:

“iOS Application Security offers an excellent foundation for anyone interested in ethical hacking on mobile platforms. This is going to be a growing sector of the penetration testing industry, as mobile devices assume an ever-greater importance in corporate IT estates."
—Network Security Newsletter

"Worthy read and covers a lot of ground in 200ish pages. Well recommended."
—Michael Howard, author of Writing Secure Code

"A major asset to any iOS developer who wants to ensure his app's ability to protect a user's data. I would highly recommend anyone interested in the field of iOS app security to take a close look at iOS Application Security."
—MacTrast

About the Author

David Thiel has nearly 20 years of computer security experience. His research and book Mobile Application Security (McGraw-Hill) helped launch the field of iOS application security, and he has presented his work at security conferences like Black Hat and DEF CON. An application security consultant for years at iSEC Partners, Thiel now works for the Internet.org Connectivity Lab.

Product details

  • ASIN ‏ : ‎ B01BLVZ3IK
  • Publisher ‏ : ‎ No Starch Press; 1st edition (February 16, 2016)
  • Publication date ‏ : ‎ February 16, 2016
  • Language ‏ : ‎ English
  • File size ‏ : ‎ 21224 KB
  • Text-to-Speech ‏ : ‎ Enabled
  • Screen Reader ‏ : ‎ Supported
  • Enhanced typesetting ‏ : ‎ Enabled
  • X-Ray ‏ : ‎ Not Enabled
  • Word Wise ‏ : ‎ Not Enabled
  • Sticky notes ‏ : ‎ On Kindle Scribe
  • Print length ‏ : ‎ 297 pages
  • Customer Reviews:
    4.2 4.2 out of 5 stars 20 ratings

Customer reviews

4.2 out of 5 stars
4.2 out of 5
20 global ratings

Top reviews from the United States

Mr Senor
5.0 out of 5 stars Extremely well-done and valuable
Reviewed in the United States on February 26, 2016
Verified Purchase
As someone who works in iOS enterprise development (and, specifically iOS security), I'm always looking for a great new learning / reference source. This is the best I've found. The author clearly knows not only iOS security but the iOS ecosystem in general, including how Cocoa and other frameworks play into the security consideration. He knows how to organize and express the considerations at just the right level to get the important elements across succinctly (compare with "Learning iOS Security" which completely exhausted me). Finally, it is up-to-date including things like iOS9 TLS requirements,...etc.

While other books in this space feel sort of like they came from security people who want to apply some concepts and then write an iOS book (e.g. BlackHat Joe steps into iOS). This one feels like someone who knows both iOS and security very well and presents the whole picture with clarity.
6 people found this helpful
Helpful
 Report
Jason Haddix
4.0 out of 5 stars Just shy of perfection. A must have for any iOS security person.
Reviewed in the United States on February 14, 2016
Verified Purchase
I've been an iOS and Objective C security consultant for 5 years now. David's 1st presentation about iOS security was one of the 1st of any substance on the subject (other than Ilja van Sprundel's at iOActive and Dominic Chell's at MDSec). This book reads like that presentation on steroids. It is by far more effective at explaining iOS security issues using source and examples than any other reference, including Apple's own API docs. For this I love it. There is, however, a lack of content on the "without-source" side of security testing iOS apps. It does a good job of mentioning some manual methods for certain aspects of this but fails to mention some recent, relevant tools/techniques in this realm (idb, Frida, runtime hacking on non-jailbroken phones / dylib injection, ++). They do mention dynamic testing tools written by iSec Partners but those tools aren't my favorite (no offense to the authors company). Overall this book and the Mobile Application Hackers Handbook should be purchased by every security person studying iOS security.
10 people found this helpful
Helpful
 Report
Clinton
5.0 out of 5 stars Great overall security view for IOS
Reviewed in the United States on October 4, 2017
Verified Purchase
Great book for overall security for IOS. Great for beginning pentesters
Helpful
 Report
John
3.0 out of 5 stars Not very detailed
Reviewed in the United States on July 28, 2018
Verified Purchase
It’s interesting but nothing special. No real hacking value. Just stuff you easily find on Apple Developer portal
Helpful
 Report
Dark Angel
5.0 out of 5 stars This is one of the best iOS security books
Reviewed in the United States on May 31, 2016
This is one of the best iOS security books. It was very helpful to understand the encryption key hierarchy and how to develop iOS app even more securely. And especially, I really enjoyed "data leakage" part regarding NSLog and the Apple System Log. And I learned screen sanitization strategies a bit from this book.
Helpful
 Report

Top reviews from other countries

Translate all reviews to English
Cliente Amazon
5.0 out of 5 stars La Bibbia del PT su App iOS
Reviewed in Italy on August 15, 2019
Verified Purchase
Questo libro rappresenta una vera e propria Bibbia per chi vuole avvicinarsi al penetration test di applicazioni iOS. Oltre a spiegare il modello di security di iOS, il libro mostra tutte le problematiche relative allo sviluppo di applicazioni iOS. Ogni problematica viene spiegata mostrando il codice sorgente vulnerabile e la remediation a tale problema.
One person found this helpful
 Report
Report an issue

Does this item contain inappropriate content?
Report
Do you believe that this item violates a copyright?
Report
Does this item contain quality or formatting issues?
Report