Hackers of India

Deconstructing The Beast: A Deep Dive Into JIT Compilation Attacks In iOS

By  Shubham Sharma  on 23 Sep 2023 @ Nullcon

Abstract

In my talk, “Deconstructing The Beast: A Deep Dive Into JIT Compilation Attacks In iOS,” I will dissect this complex form of attack within Apple’s iOS environment. Beginning with an overview of iOS architecture and security mechanisms, we will explore the role of Just-In-Time (JIT) Compilation and its manipulation during these attacks. A case study of a real-world JIT Compilation Attack on iOS will illuminate the attacker’s steps, the exploited vulnerability, and the aftermath. Finally, we will discuss preventive strategies and countermeasures, assessing their effectiveness and potential for improvement. This presentation aims to provide attendees with an in-depth understanding of JIT Compilation Attacks and the knowledge to anticipate and mitigate such threats.