+MASVS-RESILIENCE Resilience Against Reverse Engineering and Tampering
---+MASTG-TEST-0219 Testing for Debugging Symbols (iOS)
---+MASTG-TEST-0220 Usage of Outdated Code Signature Format (iOS)
---+MASTG-TEST-0224 Usage of Insecure APK Signature Version (Android)
---+MASTG-TEST-0225 Usage of Insecure APK Signature Key Size (Android)
---+MASTG-TEST-0226 Debuggable Flag Enabled in the AndroidManifest (Android)
---+MASTG-TEST-0227 Debugging Enabled for WebViews (Android)
---+MASTG-TEST-0240 Jailbreak Detection in Code (iOS)
---+MASTG-TEST-0241 Runtime Use of Jailbreak Detection Techniques (iOS)
---+MASTG-TEST-0246 Runtime Use of Secure Screen Lock Detection APIs (iOS)
---+MASTG-TEST-0247 References to APIs for Detecting Secure Screen Lock (Android)
---+MASTG-TEST-0248 References to APIs for Detecting Secure Screen Lock (iOS)
---+MASTG-TEST-0249 Runtime Use of Secure Screen Lock Detection APIs (Android)
---+MASTG-TEST-0261 Debuggable Entitlement Enabled in the entitlements.plist (iOS)
---+MASTG-TEST-0263 Logging of StrictMode Violations (Android)
---+MASTG-TEST-0264 Runtime Use of StrictMode APIs (Android)
---+MASTG-TEST-0265 References to StrictMode APIs (Android)
---+MASTG-TEST-0288 Debugging Symbols in Native Binaries (Android)
---+MASTG-TEST-0324 References to Root Detection Mechanisms (Android)
---+MASTG-TEST-0325 Runtime Use of Root Detection Techniques (Android)
---+MASTG-TEST-0338 References to Storage Integrity Check APIs (Android)
---+MASTG-TEST-0341 Runtime Use of Hook Detection Techniques (Android)
---+MASTG-TEST-0351 Runtime Use of Emulator Detection Techniques (Android)
---+MASTG-TEST-0352 References to Debugging Detection APIs (Android)
---+MASTG-TEST-0353 Runtime Use of Debugging Detection APIs (Android)
---+MASTG-TEST-0354 Runtime Use of Hook Detection Techniques (iOS)
---+MASTG-TEST-0358 Implementation Details Exposure Through Logging APIs (iOS)
---+MASTG-TEST-0359 Implementation Details Exposure in Logs (iOS)
---+MASTG-TEST-0367 Runtime Use of Virtual Device Detection Techniques (iOS)
---+MASTG-TEST-0368 Insufficient Obfuscation of Security-Relevant Java/Kotlin Code (Android)
---+MASTG-TEST-0369 Insufficient Obfuscation of Security-Relevant Native Code (Android)
---+MASTG-TEST-0387 References to Storage Integrity Check APIs (iOS)
---+MASTG-TEST-0391 Insufficient Obfuscation of Security-Relevant Native Code (iOS)
---+MASTG-TEST-0401 References to Debugging Detection APIs (iOS)
---+MASTG-TEST-0402 Runtime Use of Debugging Detection APIs (iOS)

MASVS-RESILIENCE Resilience Against Reverse Engineering and Tampering

Tests for the MASVS group MASVS-RESILIENCE.

1. Prehľad

Názov Štandard

1.1 Odkazy

1.2 Identifikované požiadavky

1.3 Súvisiace predpisy

2. Identifikované požiadavky

Požiadavky
Zdroj Požiadavka

3. Súvisiace predpisy

Predpisy
Zdroj Regulácia

Prepojené úlohy

Prepojenia
Typ prepojenia Úloha
includes MASTG-TEST-0219 Testing for Debugging Symbols (iOS)
includes MASTG-TEST-0220 Usage of Outdated Code Signature Format (iOS)
includes MASTG-TEST-0224 Usage of Insecure APK Signature Version (Android)
includes MASTG-TEST-0225 Usage of Insecure APK Signature Key Size (Android)
includes MASTG-TEST-0226 Debuggable Flag Enabled in the AndroidManifest (Android)
includes MASTG-TEST-0227 Debugging Enabled for WebViews (Android)
includes MASTG-TEST-0240 Jailbreak Detection in Code (iOS)
includes MASTG-TEST-0241 Runtime Use of Jailbreak Detection Techniques (iOS)
includes MASTG-TEST-0246 Runtime Use of Secure Screen Lock Detection APIs (iOS)
includes MASTG-TEST-0247 References to APIs for Detecting Secure Screen Lock (Android)
includes MASTG-TEST-0248 References to APIs for Detecting Secure Screen Lock (iOS)
includes MASTG-TEST-0249 Runtime Use of Secure Screen Lock Detection APIs (Android)
includes MASTG-TEST-0261 Debuggable Entitlement Enabled in the entitlements.plist (iOS)
includes MASTG-TEST-0263 Logging of StrictMode Violations (Android)
includes MASTG-TEST-0264 Runtime Use of StrictMode APIs (Android)
includes MASTG-TEST-0265 References to StrictMode APIs (Android)
includes MASTG-TEST-0288 Debugging Symbols in Native Binaries (Android)
includes MASTG-TEST-0324 References to Root Detection Mechanisms (Android)
includes MASTG-TEST-0325 Runtime Use of Root Detection Techniques (Android)
includes MASTG-TEST-0338 References to Storage Integrity Check APIs (Android)
includes MASTG-TEST-0341 Runtime Use of Hook Detection Techniques (Android)
includes MASTG-TEST-0351 Runtime Use of Emulator Detection Techniques (Android)
includes MASTG-TEST-0352 References to Debugging Detection APIs (Android)
includes MASTG-TEST-0353 Runtime Use of Debugging Detection APIs (Android)
includes MASTG-TEST-0354 Runtime Use of Hook Detection Techniques (iOS)
includes MASTG-TEST-0358 Implementation Details Exposure Through Logging APIs (iOS)
includes MASTG-TEST-0359 Implementation Details Exposure in Logs (iOS)
includes MASTG-TEST-0367 Runtime Use of Virtual Device Detection Techniques (iOS)
includes MASTG-TEST-0368 Insufficient Obfuscation of Security-Relevant Java/Kotlin Code (Android)
includes MASTG-TEST-0369 Insufficient Obfuscation of Security-Relevant Native Code (Android)
includes MASTG-TEST-0387 References to Storage Integrity Check APIs (iOS)
includes MASTG-TEST-0391 Insufficient Obfuscation of Security-Relevant Native Code (iOS)
includes MASTG-TEST-0401 References to Debugging Detection APIs (iOS)
includes MASTG-TEST-0402 Runtime Use of Debugging Detection APIs (iOS)
  • OWASP -

    EN: Publications of the OWASP Foundation, https://owasp.org/. OWASP® is a registered trademark of the OWASP Foundation, Inc.; GRCA is not affiliated with, nor endorsed by, the OWASP Foundation. Only the versions published by OWASP are authoritative.

    DE: Veröffentlichungen der OWASP Foundation, https://owasp.org/. OWASP® ist eine eingetragene Marke der OWASP Foundation, Inc.; GRCA steht in keiner Verbindung zur OWASP Foundation und wird von ihr nicht unterstützt. Maßgeblich sind allein die von OWASP veröffentlichten Fassungen.