ABCDEFG
1
MASVS-STORAGE v2.0.0
2
MASVS-IDControlDescriptionMASVS v1.5.0 Coverage
3
4
MASVS-STORAGE-1The app securely stores sensitive data.Apps handle sensitive data coming from many sources such as the user, the backend, system services or other apps on the device and usually need to store it locally. The storage locations may be private to the app (e.g. its internal storage) or be public and therefore accessible by the user or other co-installed apps (e.g. public folders such as Downloads). This control ensures that any sensitive data that is intentionally stored by the app is properly protected independently of the target location.MSTG-STORAGE-1, MSTG-STORAGE-2, MSTG-STORAGE-11, MSTG-STORAGE-14
5
MASVS-STORAGE-2The app prevents leakage of sensitive data.There are cases when sensitive data is unintentionally stored or exposed to publicly accessible locations; typically as a side-effect of using certain APIs, system capabilities such as backups or logs. This control covers this kind of unintentional leaks where the developer actually has a way to prevent it.MSTG-STORAGE-3, MSTG-STORAGE-4, MSTG-STORAGE-5, MSTG-STORAGE-8
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100