OWASP Mobile Security Project Platform Specific Guidance Draft - Revision history

Dancornell: /* Data Protection */

2011-10-20T12:38:55Z

‎Data Protection

Dancornell at 12:36, 20 October 2011

2011-10-20T12:36:18Z

Dancornell at 12:24, 20 October 2011

2011-10-20T12:24:09Z

Show changes

Dancornell: /* Local Storage */

2011-10-20T11:42:37Z

‎Local Storage

Dancornell: /* Local Storage */

2011-10-20T11:36:38Z

‎Local Storage

Dancornell at 11:34, 20 October 2011

2011-10-20T11:34:44Z

Dancornell at 09:03, 13 October 2011

2011-10-13T09:03:12Z

Dancornell at 08:55, 13 October 2011

2011-10-13T08:55:54Z

Dancornell at 08:47, 13 October 2011

2011-10-13T08:47:59Z

Dancornell: Created page with "{| border="1" cellpadding="5" cellspacing="0" |- |colspan="4"|Application Permission Model |- |colspan="4"|Description of application permission model |- |iOS||Android||colspan="..."

2011-10-13T08:35:13Z

Created page with "{| border="1" cellpadding="5" cellspacing="0" |- |colspan="4"|Application Permission Model |- |colspan="4"|Description of application permission model |- |iOS||Android||colspan="..."

New page

{| border="1" cellpadding="5" cellspacing="0"
|-
|colspan="4"|Application Permission Model
|-
|colspan="4"|Description of application permission model
|-
|iOS||Android||colspan="2"|Mappings
|-
|iOS text||Android text||RISK||CONTROL
|}

@@ Line 546: / Line 546: @@
 * What formats are allowed?
 |-
-|iOS [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_iOS_Code_Draft#Local_Storage (code examples)]||Android [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_AndroidCode_Draft#Local_Storage (code examples)]||colspan="2"|Mappings
+|iOS [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_iOS_Code_Draft#Data_Protection (code examples)]||Android [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_AndroidCode_Draft#Data_Protection (code examples)]||colspan="2"|Mappings
 |-valign="top"
 |Applications are given access to their own portion of the iOS filesystem that is within the application sandbox and inaccessible to other applications. Files can be designated for Sharing and such files are accessible in the Documents/ directory in iTunes. Files can also be marked as Protected so that they can only be accessed when the device is unlocked. Property List (plist) files can be used to store user preferences and other configuration information in a way that can be moved between OS X and iOS applications.
@@ Line 585: / Line 585: @@
 |}
 == Communication Security ==
 {| border="1" cellpadding="5" cellspacing="0"

@@ Line 811: / Line 811: @@
 ----
 ''''' COPY/PASTE TEMPLATE STUFF BELOW '''''
-== Heading ==
+== EXAMPLE HEADING ==
 {| border="1" cellpadding="5" cellspacing="0"
 |-

@@ Line 8: / Line 8: @@
 * What formats are allowed?
 |-
-|iOS||Android [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_AndroidCode_Draft#Local_Storage (code examples)]||colspan="2"|Mappings
+|iOS [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_iOS_Code_Draft#Local_Storage (code examples)]||Android [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_AndroidCode_Draft#Local_Storage (code examples)]||colspan="2"|Mappings
 |-valign="top"
 |Applications are given access to their own portion of the iOS filesystem that is within the application sandbox and inaccessible to other applications. Files can be designated for Sharing and such files are accessible in the Documents/ directory in iTunes. Files can also be marked as Protected so that they can only be accessed when the device is unlocked. Property List (plist) files can be used to store user preferences and other configuration information in a way that can be moved between OS X and iOS applications.

@@ Line 8: / Line 8: @@
 * What formats are allowed?
 |-
-|iOS||Android||colspan="2"|Mappings
+|iOS||Android [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project_Platform_Specific_Guidance_AndroidCode_Draft#Local_Storage (code examples)]||colspan="2"|Mappings
 |-valign="top"
 |Applications are given access to their own portion of the iOS filesystem that is within the application sandbox and inaccessible to other applications. Files can be designated for Sharing and such files are accessible in the Documents/ directory in iTunes. Files can also be marked as Protected so that they can only be accessed when the device is unlocked. Property List (plist) files can be used to store user preferences and other configuration information in a way that can be moved between OS X and iOS applications.

← Older revision		Revision as of 09:03, 13 October 2011
Line 62:		Line 62:


−	1	+	[https://www.owasp.org/index.php/Projects/OWASP_Mobile_Security_Project_-_Top_Ten_Mobile_Controls#section_control_1 1]

	2		2

@@ Line 1: / Line 1: @@
 {| border="1" cellpadding="5" cellspacing="0"
 |-
@@ Line 63: / Line 64: @@
 [https://www.owasp.org/index.php/Projects/OWASP_Mobile_Security_Project_-_Top_Ten_Mobile_Controls#section_control_1 1]
@@ Line 85: / Line 237: @@
 {| border="1" cellpadding="5" cellspacing="0"
 |-

@@ Line 10: / Line 10: @@
 |-valign="top"
 |Applications are given access to their own portion of the iOS filesystem that is within the application sandbox and inaccessible to other applications. Files can be designated for Sharing and such files are accessible in the Documents/ directory in iTunes. Files can also be marked as Protected so that they can only be accessed when the device is unlocked. Property List (plist) files can be used to store user preferences and other configuration information in a way that can be moved between OS X and iOS applications.
-* Apple overview page on iOS Data Management
+* Apple overview page on [http://developer.apple.com/technologies/ios/data-management.html iOS Data Management]
 * Apple information about File and the Filesystem on iOS
 * Apple information about Shared files

@@ Line 1: / Line 1: @@
 {| border="1" cellpadding="5" cellspacing="0"
 |-
-|colspan="4"|Application Permission Model
+|colspan="4"|Local Storage
 |-
-|colspan="4"|Description of application permission model
+|colspan="4"|Mobile devices have the ability to store information in files, databases and other constructs. Because devices can be lost or transferred to other users without being wiped, application developers should be very careful about storing sensitive information locally on the device. Avoiding storing sensitive information on the device is preferable because then the risk of compromise is minimized.
 |-
 |iOS||Android||colspan="2"|Mappings
 |-
-|iOS text||Android text||RISK||CONTROL
+|colspan="4"|GUIDANCE TITLE
 |}