Topics of Interest: Creating an IoT-connected Mobile App Compliance Program... MASVS
summary
Claims a working certification built on OWASP MASVS and MSTG, not a new theory: a 19‑page application profile plus a test‑case library whittles MASVS’s ~80 items down to 30 key requirements across eight pledge categories and tiered levels (L1, L2, +R). It adds policy checks — verified software, vulnerability reporting and security expiration — and links tests back to MSTG. Uses tooling and research like Frida and Radare. Results: hundreds of mobile IoT apps and VPNs certified within months and vendors upgrade to reach higher levels.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:36OS Mobile Project Update
- 2:13MASVS rebranding
- 4:34Mobile App Security
- 6:11IoT Connected Mobile Apps
- 7:31What do we do
- 8:33Objective
- 9:23Building from Scratch
- 11:25Levels of Security
- 17:06Application Profile
- 17:41IoT Testing Guide
- 18:33IoT Certification Stack Diagram
- 24:18IoT Certifications
- 26:04IoT Standards
- 26:47Resources
- 27:25Benchmarks
- 28:32Wrapup
related talks
29mInsiders Guide to Mobile AppSec with Latest OWASP MASVS
21mSecuring Mobile Apps with OWASP MASVS & MSTG
28mOWASP Mobile Application Security (MAS)
29mFixing Mobile AppSec
20mMobile Application Security (MAS)
45mFast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide
46m“Mobile Wanderlust”! Our Journey to Version 2 0!
44mHow the latest MASVS & MSTG Specs Make the Best Mobile Pen Testing Cocktails