4 ms·

Independently security tested apps on Google Play

2 points by skilled 3y ago

westurner 3y ago
From "Google Play rolls out an "Independent security review" badge for apps" https://news.ycombinator.com/item?id=38134841 https://news.ycombinator.com/item?id=38134841 :: https://www.bleepingcomputer.com/news/security/google-play-adds-security-audit-badges-for-android-vpn-apps/ https://www.bleepingcomputer.com/news/security/google-play-a... : > Specifically, that standard is MASA (Mobile App Security Assessment), which was introduced last year as an initiative of the App Defense Alliance (ADA) to define a concrete set of requirements for mobile app security. > The requirements concern data storage and data privacy practices, cryptography, authentication and session management, network communication, platform interaction, and code quality. App Defense Alliance > Mobile Application Security Assessment: https://appdefensealliance.dev/masa https://appdefensealliance.dev/masa OWASP Mobile Application Security: https://mas.owasp.org/ https://mas.owasp.org/ : > The OWASP Mobile Application Security (MAS) flagship project provides a security standard for mobile apps (OWASP MASVS) and a comprehensive testing guide (OWASP MASTG) that covers the processes, techniques, and tools used during a mobile app security test, as well as an exhaustive set of test cases OWASP MAS Checklist .xlsx: https://github.com/OWASP/owasp-mastg/releases/latest/download/OWASP_MAS_Checklist.xlsx https://github.com/OWASP/owasp-mastg/releases/latest/downloa... OWASP/owasp-mastg: https://github.com/OWASP/owasp-mastg https://github.com/OWASP/owasp-mastg : > The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS). OWASP/owasp-masvs: https://github.com/OWASP/owasp-masvs https://github.com/OWASP/owasp-masvs : > The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

2 points by skilled 3y ago

From "Google Play rolls out an "Independent security review" badge for apps" https://news.ycombinator.com/item?id=38134841 https://news.ycombinator.com/item?id=38134841 :: https://www.bleepingcomputer.com/news/security/google-play-adds-security-audit-badges-for-android-vpn-apps/ https://www.bleepingcomputer.com/news/security/google-play-a... : > Specifically, that standard is MASA (Mobile App Security Assessment), which was introduced last year as an initiative of the App Defense Alliance (ADA) to define a concrete set of requirements for mobile app security. > The requirements concern data storage and data privacy practices, cryptography, authentication and session management, network communication, platform interaction, and code quality. App Defense Alliance > Mobile Application Security Assessment: https://appdefensealliance.dev/masa https://appdefensealliance.dev/masa OWASP Mobile Application Security: https://mas.owasp.org/ https://mas.owasp.org/ : > The OWASP Mobile Application Security (MAS) flagship project provides a security standard for mobile apps (OWASP MASVS) and a comprehensive testing guide (OWASP MASTG) that covers the processes, techniques, and tools used during a mobile app security test, as well as an exhaustive set of test cases OWASP MAS Checklist .xlsx: https://github.com/OWASP/owasp-mastg/releases/latest/download/OWASP_MAS_Checklist.xlsx https://github.com/OWASP/owasp-mastg/releases/latest/downloa... OWASP/owasp-mastg: https://github.com/OWASP/owasp-mastg https://github.com/OWASP/owasp-mastg : > The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS). OWASP/owasp-masvs: https://github.com/OWASP/owasp-masvs https://github.com/OWASP/owasp-masvs : > The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.