+MASVS-STORAGE Storage
---+MASTG-TEST-0200 Files Written to External Storage (Android)
---+MASTG-TEST-0201 Runtime Use of APIs to Access External Storage (Android)
---+MASTG-TEST-0202 References to APIs and Permissions for Accessing External Storage (Android)
---+MASTG-TEST-0203 Runtime Use of Logging APIs (Android)
---+MASTG-TEST-0207 Runtime Storage of Unencrypted Data in the App Sandbox (Android)
---+MASTG-TEST-0215 Sensitive Data Not Marked For Backup Exclusion (iOS)
---+MASTG-TEST-0216 Sensitive Data Not Excluded From Backup (Android)
---+MASTG-TEST-0231 References to Logging APIs (Android)
---+MASTG-TEST-0262 References to Backup Configurations Not Excluding Sensitive Data (Android)
---+MASTG-TEST-0287 Runtime Storage of Unencrypted Data via the SharedPreferences API (Android)
---+MASTG-TEST-0296 Sensitive Data Exposure in Logs (iOS)
---+MASTG-TEST-0297 Sensitive Data Exposure Through Logging APIs (iOS)
---+MASTG-TEST-0298 Runtime Monitoring of Files Eligible for Backup (iOS)
---+MASTG-TEST-0299 Data Protection Classes for Files in Private Storage (iOS)
---+MASTG-TEST-0300 References to APIs for Storing Unencrypted Data in Private Storage (iOS)
---+MASTG-TEST-0301 Runtime Use of APIs for Storing Unencrypted Data in Private Storage (iOS)
---+MASTG-TEST-0302 Sensitive Data Unencrypted in Private Storage Files (iOS)
---+MASTG-TEST-0303 References to APIs for Storing Unencrypted Data in Shared Storage (iOS)
---+MASTG-TEST-0313 References to APIs for Preventing Keyboard Caching of Text Fields (iOS)
---+MASTG-TEST-0314 Runtime Monitoring of Text Fields Eligible for Keyboard Caching (iOS)
---+MASTG-TEST-0388 References to Sensitive Data Stored Unprotected in Shared App Group Containers (iOS)

MASVS-STORAGE Storage

Tests for the MASVS group MASVS-STORAGE.

1. Přehled

Název Standard

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky
Zdroj Požadavek

3. Související regulace

Regulace
Zdroj Regulace

Propojené úkoly

Vazby
Typ vazby Úkol
includes MASTG-TEST-0200 Files Written to External Storage (Android)
includes MASTG-TEST-0201 Runtime Use of APIs to Access External Storage (Android)
includes MASTG-TEST-0202 References to APIs and Permissions for Accessing External Storage (Android)
includes MASTG-TEST-0203 Runtime Use of Logging APIs (Android)
includes MASTG-TEST-0207 Runtime Storage of Unencrypted Data in the App Sandbox (Android)
includes MASTG-TEST-0215 Sensitive Data Not Marked For Backup Exclusion (iOS)
includes MASTG-TEST-0216 Sensitive Data Not Excluded From Backup (Android)
includes MASTG-TEST-0231 References to Logging APIs (Android)
includes MASTG-TEST-0262 References to Backup Configurations Not Excluding Sensitive Data (Android)
includes MASTG-TEST-0287 Runtime Storage of Unencrypted Data via the SharedPreferences API (Android)
includes MASTG-TEST-0296 Sensitive Data Exposure in Logs (iOS)
includes MASTG-TEST-0297 Sensitive Data Exposure Through Logging APIs (iOS)
includes MASTG-TEST-0298 Runtime Monitoring of Files Eligible for Backup (iOS)
includes MASTG-TEST-0299 Data Protection Classes for Files in Private Storage (iOS)
includes MASTG-TEST-0300 References to APIs for Storing Unencrypted Data in Private Storage (iOS)
includes MASTG-TEST-0301 Runtime Use of APIs for Storing Unencrypted Data in Private Storage (iOS)
includes MASTG-TEST-0302 Sensitive Data Unencrypted in Private Storage Files (iOS)
includes MASTG-TEST-0303 References to APIs for Storing Unencrypted Data in Shared Storage (iOS)
includes MASTG-TEST-0313 References to APIs for Preventing Keyboard Caching of Text Fields (iOS)
includes MASTG-TEST-0314 Runtime Monitoring of Text Fields Eligible for Keyboard Caching (iOS)
includes MASTG-TEST-0388 References to Sensitive Data Stored Unprotected in Shared App Group Containers (iOS)
  • OWASP -

    EN: Publications of the OWASP Foundation, https://owasp.org/. OWASP® is a registered trademark of the OWASP Foundation, Inc.; GRCA is not affiliated with, nor endorsed by, the OWASP Foundation. Only the versions published by OWASP are authoritative.

    DE: Veröffentlichungen der OWASP Foundation, https://owasp.org/. OWASP® ist eine eingetragene Marke der OWASP Foundation, Inc.; GRCA steht in keiner Verbindung zur OWASP Foundation und wird von ihr nicht unterstützt. Maßgeblich sind allein die von OWASP veröffentlichten Fassungen.