An adversary model to evaluate DRM protection of video contents on iOS devices. Issue 56 (February 2016)

• Record Type: Journal Article
• Authors: D'Orazio, Christian; Choo, Kim-Kwang Raymond
• Is Part Of: Computers & security. Issue 56(2016)
• Page Start: 94
• Page End: 110
• Publication Date: 2016-02
• Subjects: iOS DRM -- HTTP live streaming -- HLS -- Adversary model -- Video stream protection -- Video-on-Demand -- Live TV -- Encryption; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2015.06.009
• Languages: English
• ISSNs: 0167-4048

Abstract

Highlights: Adversary model for iOS app DRM protection for video contents. Circumvent or bypass DRM control for iOS apps. Vulnerabilities in popular Video-on-Demand (VOD) apps. Need for hardening of iOS device security to avoid device jailbreaking. Graphical Abstract: Abstract: Due to the increasing use of mobile devices and apps to view copyright protected content (e.g. movies) on the go, digital rights management (DRM) protections have primarily been used to protect the digital intellectual property and control their distribution and usage on mobile devices. Unsurprisingly, attackers have sought to circumvent or bypass DRM control in order to obtain unauthorised access to copyrighted content. Given the ongoing and rapidly changing nature of mobile device technologies, it is essential for DRM protection designer to have an in-depth understanding of an attacker's capabilities and the potential attack vectors (e.g. vulnerabilities that can be exploited to bypass DRM protection). In this paper, we propose an adversary model that formalizes the real world capabilities of a DRM attacker targeting Apple iOS devices. We then demonstrate its utility using four Video-on-Demand (VoD) apps, one live TV app, and a security DRM protection module. To avoid similar structural mistakes in future designs, we outline two recommendations.