iService: Detecting and Evaluating the Impact of Confused Deputy Problem in AppleOS
iService: Detecting and Evaluating the Impact of Confused Deputy Problem in AppleOS
Yizhuo Wang,Yikun Hu,Xuangan Xiao,Dawu Gu
2022 · DOI: 10.1145/3564625.3568001
Asia-Pacific Computer Systems Architecture Conference · 8 Citations
TLDR
iService, a systematic method to automatically detect and evaluate the impact of confused deputies in AppleOS system services, finds 11 confused deputies, five of which are zero-day bugs and all of them have been fixed, with three considered high risk.