Impact to other quality attributes when improving security of IOS



IOS operating system have pay more attention towards the security of their operating system. When they try to improve their security quality attribute that was affected in other quality attributes in positively as well as negatively.so let’s see some of the security improvements that are done by IOS and how they affected for other quality attributes.



1.  6-digits Pass-code
After the release of IOS 9, Apple has change their default pass-code form 4 digits to 6 digits. Their main target was make harder for hackers to crack their system.

➢    But with this newly introduced feature Usability has been decreased. Users have faced to troubles with this newly introduced security feature.
                  
          Ex-:

➢    This 6 digit pass-code was introduced with after the IOS version 9 onward. But this feature can’t be use in IOS later versions. Users need to upgrade their IOS versions to use this feature. Because of that Availability has been decreased.


2. Auto Lock Feature

While it’s practical to pick up an iPhone or iPad and get back to what you’ve been working on by keeping the device unlocked, it makes users prone to security risk as anyone can easily access most of the device’s content by browsing it.

➢      This new auto lock security feature helps users to quickly auto-lock their device when not in use. Because of that feature security increase as well as usability increases. If user forget to lock their mobile after use it, because of this feature it will be automatically get lock.
➢      Because of this feature Accessibility got decreased. Because everyone can’t access the system unless you are not an authorized person.



3. Notification
Anyone can easily have a quick preview of your email and text messages. For security purposes, users are given the option to turn off the preview setting of their text messages by going to Settings > Notifications > Messages and toggle off Show Previews. This will allow users to see who sent a message, but not it’s content

➢    Because of this feature users do not need to worry about their privacy of the text messages and emails them received.so this feature increase the usability of IOS system while increasing the security.
➢    Everyone can see the notifications, but everyone can’t access them unless they are authorized person.so this feature have reduce the accessibility of the IOS.



4. Encryption

 Apple revealed that it will require all IOS apps to use HTTPS connections instead of HTTP to encrypt web traffic. It will use an existing feature called the App Transport Security (ATS) that was originally launched on IOS 9. The announcement promises to enforce secure connections over the web even for apps.
➢      If user has low knowledge on technical background user will not be able to change settings for HTTPS connections. Then that person will be not able to use some of the services.so this will lead path to reduce usability.







 






Comments

Post a Comment

Popular posts from this blog

OAuth 2.0

Image
OAuth is an open standard for access delegation, commonly used as a way for Internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Facebook, Microsoft and Twitter to permit the users to share information about their accounts with third party applications or websites Auth 2.0 has Four major roles  Client  -- Also called "the app". It can be an app running on a mobile device or a traditional web app. The app makes requests to the resource server for protected assets on behalf of the resource owner. The resource owner must give the app permission to access the protected resources. Resource owner  -- Also called an "end user". This is generally the person (or other entity) who is capable of granting access to a protected resource. For example, if an app needs to use data from one of your social media sites, then you are the re...
Read more

Cross Site Request Forgery

Image
WHAT IS CSRF Cross site request forgery (CSRF), also known as XSRF, Sea Surf or Session Riding, is an attack vector that tricks a web browser into executing an unwanted action in an application to which a user is logged in. For better understand let's look at this example User loged in to his bank account.The bank give session token. Haker send malicious link that look like it pointed to some trusted location.But really it connected to the bank. When the user clicked on the fake link it use previously set session token.The hackers request will be executed and the users account hacked.for example money from the users account will be transfered to the the hackers account. How did this happened? The hackers request to the bank was forged as it used the same session token of the user, which did not require user to log in again Let's see how to prevent CSRF attacks... The most popular implementation to prevent Cross-site Request Forgery (CSRF), i...
Read more