+MASVS-RESILIENCE Resilience Against Reverse Engineering and Tampering
---+MASTG-TEST-0219 Testing for Debugging Symbols (iOS)
---+MASTG-TEST-0220 Usage of Outdated Code Signature Format (iOS)
---+MASTG-TEST-0224 Usage of Insecure APK Signature Version (Android)
---+MASTG-TEST-0225 Usage of Insecure APK Signature Key Size (Android)
---+MASTG-TEST-0226 Debuggable Flag Enabled in the AndroidManifest (Android)
---+MASTG-TEST-0227 Debugging Enabled for WebViews (Android)
---+MASTG-TEST-0240 Jailbreak Detection in Code (iOS)
---+MASTG-TEST-0241 Runtime Use of Jailbreak Detection Techniques (iOS)
---+MASTG-TEST-0246 Runtime Use of Secure Screen Lock Detection APIs (iOS)
---+MASTG-TEST-0247 References to APIs for Detecting Secure Screen Lock (Android)
---+MASTG-TEST-0248 References to APIs for Detecting Secure Screen Lock (iOS)
---+MASTG-TEST-0249 Runtime Use of Secure Screen Lock Detection APIs (Android)
---+MASTG-TEST-0261 Debuggable Entitlement Enabled in the entitlements.plist (iOS)
---+MASTG-TEST-0263 Logging of StrictMode Violations (Android)
---+MASTG-TEST-0264 Runtime Use of StrictMode APIs (Android)
---+MASTG-TEST-0265 References to StrictMode APIs (Android)
---+MASTG-TEST-0288 Debugging Symbols in Native Binaries (Android)
---+MASTG-TEST-0324 References to Root Detection Mechanisms (Android)
---+MASTG-TEST-0325 Runtime Use of Root Detection Techniques (Android)
---+MASTG-TEST-0338 References to Storage Integrity Check APIs (Android)
---+MASTG-TEST-0341 Runtime Use of Hook Detection Techniques (Android)
---+MASTG-TEST-0351 Runtime Use of Emulator Detection Techniques (Android)
---+MASTG-TEST-0352 References to Debugging Detection APIs (Android)
---+MASTG-TEST-0353 Runtime Use of Debugging Detection APIs (Android)
---+MASTG-TEST-0354 Runtime Use of Hook Detection Techniques (iOS)
---+MASTG-TEST-0358 Implementation Details Exposure Through Logging APIs (iOS)
---+MASTG-TEST-0359 Implementation Details Exposure in Logs (iOS)
---+MASTG-TEST-0367 Runtime Use of Virtual Device Detection Techniques (iOS)
---+MASTG-TEST-0368 Insufficient Obfuscation of Security-Relevant Java/Kotlin Code (Android)
---+MASTG-TEST-0369 Insufficient Obfuscation of Security-Relevant Native Code (Android)
---+MASTG-TEST-0387 References to Storage Integrity Check APIs (iOS)
---+MASTG-TEST-0391 Insufficient Obfuscation of Security-Relevant Native Code (iOS)
---+MASTG-TEST-0401 References to Debugging Detection APIs (iOS)
---+MASTG-TEST-0402 Runtime Use of Debugging Detection APIs (iOS)

MASVS-RESILIENCE Resilience Against Reverse Engineering and Tampering

Tests for the MASVS group MASVS-RESILIENCE.

1. Áttekintés

Megnevezés Szabvány

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

Követelmények
Forrás Követelmény

3. Kapcsolódó szabályozások

Szabályozások
Forrás Szabályozás

Kapcsolt feladatok

Kapcsolatok
Kapcsolattípus Feladat
includes MASTG-TEST-0219 Testing for Debugging Symbols (iOS)
includes MASTG-TEST-0220 Usage of Outdated Code Signature Format (iOS)
includes MASTG-TEST-0224 Usage of Insecure APK Signature Version (Android)
includes MASTG-TEST-0225 Usage of Insecure APK Signature Key Size (Android)
includes MASTG-TEST-0226 Debuggable Flag Enabled in the AndroidManifest (Android)
includes MASTG-TEST-0227 Debugging Enabled for WebViews (Android)
includes MASTG-TEST-0240 Jailbreak Detection in Code (iOS)
includes MASTG-TEST-0241 Runtime Use of Jailbreak Detection Techniques (iOS)
includes MASTG-TEST-0246 Runtime Use of Secure Screen Lock Detection APIs (iOS)
includes MASTG-TEST-0247 References to APIs for Detecting Secure Screen Lock (Android)
includes MASTG-TEST-0248 References to APIs for Detecting Secure Screen Lock (iOS)
includes MASTG-TEST-0249 Runtime Use of Secure Screen Lock Detection APIs (Android)
includes MASTG-TEST-0261 Debuggable Entitlement Enabled in the entitlements.plist (iOS)
includes MASTG-TEST-0263 Logging of StrictMode Violations (Android)
includes MASTG-TEST-0264 Runtime Use of StrictMode APIs (Android)
includes MASTG-TEST-0265 References to StrictMode APIs (Android)
includes MASTG-TEST-0288 Debugging Symbols in Native Binaries (Android)
includes MASTG-TEST-0324 References to Root Detection Mechanisms (Android)
includes MASTG-TEST-0325 Runtime Use of Root Detection Techniques (Android)
includes MASTG-TEST-0338 References to Storage Integrity Check APIs (Android)
includes MASTG-TEST-0341 Runtime Use of Hook Detection Techniques (Android)
includes MASTG-TEST-0351 Runtime Use of Emulator Detection Techniques (Android)
includes MASTG-TEST-0352 References to Debugging Detection APIs (Android)
includes MASTG-TEST-0353 Runtime Use of Debugging Detection APIs (Android)
includes MASTG-TEST-0354 Runtime Use of Hook Detection Techniques (iOS)
includes MASTG-TEST-0358 Implementation Details Exposure Through Logging APIs (iOS)
includes MASTG-TEST-0359 Implementation Details Exposure in Logs (iOS)
includes MASTG-TEST-0367 Runtime Use of Virtual Device Detection Techniques (iOS)
includes MASTG-TEST-0368 Insufficient Obfuscation of Security-Relevant Java/Kotlin Code (Android)
includes MASTG-TEST-0369 Insufficient Obfuscation of Security-Relevant Native Code (Android)
includes MASTG-TEST-0387 References to Storage Integrity Check APIs (iOS)
includes MASTG-TEST-0391 Insufficient Obfuscation of Security-Relevant Native Code (iOS)
includes MASTG-TEST-0401 References to Debugging Detection APIs (iOS)
includes MASTG-TEST-0402 Runtime Use of Debugging Detection APIs (iOS)
  • OWASP -

    EN: Publications of the OWASP Foundation, https://owasp.org/. OWASP® is a registered trademark of the OWASP Foundation, Inc.; GRCA is not affiliated with, nor endorsed by, the OWASP Foundation. Only the versions published by OWASP are authoritative.

    DE: Veröffentlichungen der OWASP Foundation, https://owasp.org/. OWASP® ist eine eingetragene Marke der OWASP Foundation, Inc.; GRCA steht in keiner Verbindung zur OWASP Foundation und wird von ihr nicht unterstützt. Maßgeblich sind allein die von OWASP veröffentlichten Fassungen.