“Mobile Wanderlust”! Our Journey to Version 2 0!
summary
Refactors the OWASP mobile standard into a machine-readable, automation-first v2: a python script already generates the mobile testing checklist as an Excel sheet in 13 languages, the massive MSTG (≈800 pages) and MASVS get split into smaller atomic tests, and storage controls are condensed from 15 ⇒ 5 focused requirements. Changes live on GitHub discussions for traceability, tests map to MSTG cases for CI/CD and tooling (SAST/DAST/regex), and Google Play badge interoperability requires independent review per MASVS+MSTG.
AI-written summary · about
chapters (9)
- 0:00Welcome
- 2:12OWASP Mobile Security Project
- 6:49Google’s data safety section
- 11:11MASVS refactoring overview
- 17:07Storage requirements refactoring
- 28:34Mapping MASVS to test cases
- 33:51Compliance as code
- 39:17How to contribute
- 41:04Q&A
related talks
19mFlagship Projects: Mobile Security Testing Guide
43m"Mobile Wanderlust"! Our Journey To Version 2.0!
20mMobile Application Security (MAS)
21mSecuring Mobile Apps with OWASP MASVS & MSTG
30mTopics of Interest: Creating an IoT-connected Mobile App Compliance Program... MASVS
28mOWASP Mobile Application Security (MAS)
45mFast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide
44mHow the latest MASVS & MSTG Specs Make the Best Mobile Pen Testing Cocktails