移动设备安全加固：iOS 和 Android 高级保护程序的取证比较.pdf

1、Mobile Device Hardening:A Forensic Comparison of Advanced Protection Programs in iOS and AndroidLuca CadoniciThe Mobile OS duopoly:Android&iOS3https:/ 25,71%Combined(iOS+Android):99.61%they cover virtually the entire global mobile OS marketOthers 0.39%:Samsung,KaiOS,Linux,GrapheneOS 4Essential Tools

2、For journalists,activists,and political figures,mobile devices are critical for communication,documentation,and coordination.Personal devices are an extension of their work.Primary VulnerabilitiesThese same devices are a primary target for surveillance,hacking,and data extraction,exposing both the u

3、ser and their network to severe risk.Standard Security Is Not EnoughThe threat landscape requires security measures that go beyond consumer-level protection to counter sophisticated,state-sponsored attacks.Industry Response:Apple and Google have introduced advanced protection programs aimed at secur

4、ing mobile devices.Mobile Devices&High-Risk Individuals:A Paradox of Protection5AppleLockdown ModeAdvanced Data Protection(iCloud E2EE)Stolen Device ProtectionApple ID Security Keys/PasskeysiMessage Contact Key VerificationGoogleTheft defenses(Theft Detection Lock&Offline Device Lock)Identity CheckP

5、lay ProtectAdvanced Protection Programme(account)Advanced Protection Programme(mobile)RCS end-to-end encryption(Messages)Beyond Defaults:Apple&Google Advanced Protection ProgramsApple iMessage Most non-image attachments are blocked;link previews are disabled.Browser Just-in-time(JIT)compilation and

6、other high-risk web features are disabled.Apple Services invitations Incoming requests(e.g.,FaceTime)from contacts user hasnt previously interacted with are blocked.Wired connections When the iPhone is locked,wired data to computers/accessories is blocked.USB Restricted Mode(iOS 12+):after 1 hour lo