+MASVS-PRIVACY Privacy
---+MASTG-TEST-0206 Undeclared PII in Network Traffic Capture (Android)
---+MASTG-TEST-0254 Dangerous App Permissions (Android)
---+MASTG-TEST-0281 Undeclared Known Tracking Domains (iOS)
---+MASTG-TEST-0318 References to SDK APIs Known to Handle Sensitive User Data (Android)
---+MASTG-TEST-0319 Runtime Use of SDK APIs Known to Handle Sensitive User Data (Android)
---+MASTG-TEST-0360 Purpose String Accuracy for Reachable Protected Resource Access (iOS)
---+MASTG-TEST-0361 Runtime Use of Protected Resource APIs Without Accurate Purpose Strings (iOS)
---+MASTG-TEST-0362 Entitlements for Unjustified Capability Exposure (iOS)
---+MASTG-TEST-0363 Runtime Use of Entitlement-Backed APIs for Unjustified Capability Exposure (iOS)

MASVS-PRIVACY Privacy

Tests for the MASVS group MASVS-PRIVACY.

1. Resumen

Título Estándar

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos
Fuente Requisito

3. Regulaciones relacionadas

Regulaciones
Fuente Regulación

Incidencias vinculadas

  • OWASP -

    EN: Publications of the OWASP Foundation, https://owasp.org/. OWASP® is a registered trademark of the OWASP Foundation, Inc.; GRCA is not affiliated with, nor endorsed by, the OWASP Foundation. Only the versions published by OWASP are authoritative.

    DE: Veröffentlichungen der OWASP Foundation, https://owasp.org/. OWASP® ist eine eingetragene Marke der OWASP Foundation, Inc.; GRCA steht in keiner Verbindung zur OWASP Foundation und wird von ihr nicht unterstützt. Maßgeblich sind allein die von OWASP veröffentlichten Fassungen.