ISSA-HR Presents: Broadcasting Vulnerabilities

Offense and Defense in Apple IPC By Nicholas Dubois Talk Description Darwin Notifications serve as a core inter-process communication (IPC) mechanism in Apple OSes for broadcasting systemwide events between the kernel, daemons, and applications as intended for efficient state synchronization. Throughout this talk we will understand how these notifications can be identified through static decomplication and dynamic monitoring on jailbroken devices, leveraged offensively, and leveraged defensively to harden access controls. Ultimately, this comprehensive review empowers engineers and researchers to audit and fortify Apple platform IPC surfaces. Attendees will gain insights into auditing and exploiting this often-overlooked attack surface. Speaker: Nicholas Dubois is a security researcher specializing in low level OS internals and software security. Currently working as an iOS Researcher at Fingerprint, he focuses on advanced mobile security research, automated binary analysis, and understanding complex operating system mechanisms. As the founder of Dragon Eye Intelligence, consultant & instructor at Hexordia, and a frequent speaker at security venues such as Black Hat, Nicholas combines deep expertise in reverse engineering with custom tooling development to analyze platform architectures and enhance software intelligence. After-Social: We will meet at Plaza DeGollado Mexican Grill for the after-social. It is down the street from ECPI on the corner of Newtown Road. Lets have some fun together. 5:30 PM – 6:00 PM Meet, Greet and Network 6:00 PM – 6:15 PM Introduction and upcoming events discussion 6:15 PM – 7:15 PM Speakers Presentation and Q&A 7:15 PM – 7:45 PM ISSA-HR Business Meeting (Meeting ends) 7:45 PM Unofficial social @ Plaza Degollado Mexican Grill, 198 Newtown Rd., VB 5555 Greenwich Rd Suite 360 Virginia Beach, VA 23462 Join Zoom Meeting Link: https://zoom.us/j/96176658129?pwd=ZGd6WU02LzdnYnErMFBsYnp2L2F3UT09 For more information about the Hampton Roads Chapter of ISSA, visit https://issa-hr.org For the international organization: http://www.issa.org Sponcered By: Swish Data Swish Capabilities Brief: https://swishdata.com/wp-content/uploads/Digital-Version-Capabilities-Brief-.pdf