OWASP Mobile Application Security (MAS)

on YouTube ↗28m

" summary

Project presents a concrete interface called MASWE beta that maps MVS controls to specific weaknesses, each with unique IDs, profiles and one or more MASTG-style atomic tests. Repositories include runnable demos and two test apps (Android and iOS), with an automation pipeline that already generates APKs and validates samples. Tests use static rules like semgrep rules and runtime hooks (Frida/Freeda) to produce verifiable observations and failing/passing outputs.

AI-written summary · about

" chapters (8)

1. 0:00Introduction
2. 0:57MAS framework overview
3. 3:45Weakness structure and testing
4. 7:01Navigating the MASWE
5. 12:52Demonstration and code samples
6. 18:37Automation and verification
7. 22:42Community and collaboration
8. 25:05Q&A and conclusion

" related talks

• 20mMobile Application Security (MAS)Sven Schleier, Carlos Holguera · Global AppSec Lisbon 2024
• 21mSecuring Mobile Apps with OWASP MASVS & MSTGCarlos Holguera · droidcon Berlin 2022
• 29mInsiders Guide to Mobile AppSec with Latest OWASP MASVSBrendan Hann · Global AppSec US 2021 Virtual
• 29mFixing Mobile AppSecSven Schleier · OWASP AppSec USA 2018
• 45mFast Forwarding Mobile Security With The OWASP Mobile Security Testing GuideJeroen Willemsen · OWASP Global AppSec Amsterdam 2019
• 30mTopics of Interest: Creating an IoT-connected Mobile App Compliance Program... MASVSB. Reed · OWASP 20th Anniversary 2021
• 44mHow the latest MASVS & MSTG Specs Make the Best Mobile Pen Testing CocktailsBrian Reed, Tony Ram · OWASP Global AppSec Virtual 2020
• 43m"Mobile Wanderlust"! Our Journey To Version 2.0!Sven Schleier · Global AppSec Dublin 2023