WEwesturner·Nov 3, 2023
From "Google Play rolls out an "Independent security review" badge for apps" https://news.ycombinator.com/item?id=38134841 ::
https://www.bleepingcomputer.com/news/security/google-play-a... :
> Specifically, that standard is MASA (Mobile App Security Assessment), which was introduced last year as an initiative of the App Defense Alliance (ADA) to define a concrete set of requirements for mobile app security.
> The requirements concern data storage and data privacy practices, cryptography, authentication and session management, network communication, platform interaction, and code quality.
App Defense Alliance >
Mobile Application Security Assessment: https://appdefensealliance.dev/masa
OWASP Mobile Application Security:
https://mas.owasp.org/ :
> The OWASP Mobile Application Security (MAS) flagship project provides a security standard f
Read the rest
or mobile apps (OWASP MASVS) and a comprehensive testing guide (OWASP MASTG) that covers the processes, techniques, and tools used during a mobile app security test, as well as an exhaustive set of test cases
OWASP MAS Checklist .xlsx:
https://github.com/OWASP/owasp-mastg/releases/latest/downloa...
OWASP/owasp-mastg:
https://github.com/OWASP/owasp-mastg :
> The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
OWASP/owasp-masvs:
https://github.com/OWASP/owasp-masvs :
> The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.