GRASP: A Policy-enforcement Framework for iOS (CIMCA)

The GrammaTech Application Security Platform (GRASP) is a tool for enabling app store administrators to specify custom security policies. GRASP will automatically re-write mobile application code to ensure security policies are enforced at run-time, using a combination of static analysis and injected run-time instrumentation. GRASP will Leveraging GrammaTech's experience on performing static analysis on ARM binaries in order to target Apple's iOS platform. Many of the components of GRASP will nevertheless be target-neutral, making it a product that can inject new security policy enforcement mechanisms into arbitrary desktop or mobile application code. GRASP will make extensive use of GrammaTech's state-of-the-art binary analysis and rewriting capabilities, ensuring that administrators can add customized security policy enforcement and monitoring to COTS applications, even in the absence of the original source code.