The document summarizes the development of a secure iPhone game application called "Poof" that incorporates software security principles throughout the software development lifecycle. The application focuses on usability, security, and integrity. Risks like buffer overflows, file modification, and memory leaks are analyzed. Input validation and file writing functions are enhanced to address these risks and help ensure the application is reliable and secure.

1. The iPhone: A Case for Software Security Dwayne Bates

10. Proof of Concept Poof- is an iPhone game in which the player must try to match at least three like tiles at a time in an effort to clear the board. If the player succeeds in this effort and achieves a high score they are prompted to enter their name into a high score list.

15. File Modification

16. File Modification -( void ) saveSettings{ NSString * path = [[ NSBundle mainBundle ] bundlePath ]; NSString * file = [path stringByAppendingPathComponent : @"settings.plist" ]; [ self . settings writeToFile :file atomically : YES ]; [path release ]; [file release ]; } -( void ) saveHighScores{ NSString * path = [[ NSBundle mainBundle ] bundlePath ]; NSString * file = [path stringByAppendingPathComponent : @"highscores.plist" ]; [ self . highScores writeToFile :file atomically : YES ]; [path release ]; [file release ]; }

17. Memory Leaks CLANG- Static Analysis Results

18. Memory Leaks