Securing Mobile Apps with OWASP MASVS & MSTG

on YouTube ↗21m

" summary

Google recognizes OWASP MASVS since April 2022 and uses it for the App Defense Alliance badge; the MASVS lists concrete controls (storage has about 15 requirements) and the companion MSTG gives step‑by‑step tests, CI/CD checks and exact tooling. Examples include static unpacking, dynamic hooks with Frida, binary analysis with Radare2, network interception with Burp/Wireshark and device control via ADB. The project publishes runnable crackme apps, is used by authorized labs, and the verification process yields a visible Play Store badge.

AI-written summary · about

" chapters (6)

1. 0:00Introduction to OWASP MASVS & MSTG
2. 3:58Google App Defense Alliance
3. 10:37OWASP MASVS overview
4. 12:04MSTG testing guide
5. 17:02Tools for mobile security
6. 19:14Resources and community

" related talks

• 28mOWASP Mobile Application Security (MAS)Sven Schleier, Carlos Holguera · OWASP Global AppSec San Francisco 2024
• 29mInsiders Guide to Mobile AppSec with Latest OWASP MASVSBrendan Hann · Global AppSec US 2021 Virtual
• 30mTopics of Interest: Creating an IoT-connected Mobile App Compliance Program... MASVSB. Reed · OWASP 20th Anniversary 2021
• 20mMobile Application Security (MAS)Sven Schleier, Carlos Holguera · Global AppSec Lisbon 2024
• 29mFixing Mobile AppSecSven Schleier · OWASP AppSec USA 2018
• 16mBe Aware & Prepare- Independent Security Reviews Build User TrustJonathan Seals · droidcon New York 2023
• 44mHow the latest MASVS & MSTG Specs Make the Best Mobile Pen Testing CocktailsBrian Reed, Tony Ram · OWASP Global AppSec Virtual 2020
• 45mFast Forwarding Mobile Security With The OWASP Mobile Security Testing GuideJeroen Willemsen · OWASP Global AppSec Amsterdam 2019